{
	"_comment": "https://fiorlaw.com is a public website with no protected APIs. This metadata is published so agents can discover authentication policy (RFC 8414 / OpenID Connect Discovery). Listed endpoints are reserved and do not issue tokens.",
	"issuer": "https://fiorlaw.com",
	"authorization_endpoint": "https://fiorlaw.com/oauth/authorize",
	"token_endpoint": "https://fiorlaw.com/oauth/token",
	"revocation_endpoint": "https://fiorlaw.com/oauth/revoke",
	"jwks_uri": "https://fiorlaw.com/.well-known/jwks.json",
	"grant_types_supported": ["authorization_code"],
	"response_types_supported": ["code"],
	"response_modes_supported": ["query"],
	"subject_types_supported": ["public"],
	"id_token_signing_alg_values_supported": ["RS256"],
	"token_endpoint_auth_methods_supported": ["none"],
	"code_challenge_methods_supported": ["S256"],
	"scopes_supported": ["read"],
	"agent_auth": {
		"skill": "https://fiorlaw.com/auth.md",
		"register_uri": "https://fiorlaw.com/agent/auth",
		"identity_endpoint": "https://fiorlaw.com/agent/auth",
		"claim_uri": "https://fiorlaw.com/agent/claim",
		"claim_endpoint": "https://fiorlaw.com/agent/claim",
		"revocation_uri": "https://fiorlaw.com/agent/revoke",
		"identity_types_supported": ["anonymous", "identity_assertion"],
		"anonymous": {
			"credential_types_supported": ["access_token"]
		},
		"identity_assertion": {
			"assertion_types_supported": ["urn:ietf:params:oauth:token-type:id-jag"],
			"credential_types_supported": ["access_token"]
		},
		"credential_types_supported": ["access_token"],
		"events_supported": [
			"https://schemas.workos.com/events/agent/auth/identity/assertion/revoked"
		]
	}
}