Sep 8, 2025 · Sep 8, 2025
diff --git a/coderd/coderd.go b/coderd/coderd.go
 }

 // OAuth2 metadata endpoint for RFC 8414 discovery
 r.Get("/.well-known/oauth-authorization-server", api.oauth2AuthorizationServerMetadata())
 r.Route("/.well-known/oauth-authorization-server", func(r chi.Router) {
 r.Get("/*", api.oauth2AuthorizationServerMetadata())
 })
 // OAuth2 protected resource metadata endpoint for RFC 9728 discovery
 r.Get("/.well-known/oauth-protected-resource", api.oauth2ProtectedResourceMetadata())
 r.Route("/.well-known/oauth-protected-resource", func(r chi.Router) {
 r.Get("/*", api.oauth2ProtectedResourceMetadata())
 })

 // OAuth2 linking routes do not make sense under the /api/v2 path.  These are
 // for an external application to use Coder as an OAuth2 provider, not for
Original file line number	Diff line number	Diff line change
Expand Up		@@ -948,9 +948,13 @@ func New(options Options) API {
		}

		// OAuth2 metadata endpoint for RFC 8414 discovery
		r.Get("/.well-known/oauth-authorization-server", api.oauth2AuthorizationServerMetadata())
		r.Route("/.well-known/oauth-authorization-server", func(r chi.Router) {
		r.Get("/*", api.oauth2AuthorizationServerMetadata())
		})
		// OAuth2 protected resource metadata endpoint for RFC 9728 discovery
		r.Get("/.well-known/oauth-protected-resource", api.oauth2ProtectedResourceMetadata())
		r.Route("/.well-known/oauth-protected-resource", func(r chi.Router) {
		r.Get("/*", api.oauth2ProtectedResourceMetadata())
		})

		// OAuth2 linking routes do not make sense under the /api/v2 path. These are
		// for an external application to use Coder as an OAuth2 provider, not for
Expand Down