Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

Hi Ory Team! I have a question regarding the OAuth client `metadata` property in Hydra. The property description states:
&gt; Store custom data on this client. The metadata field is *visible publicly* when performing various OAuth2 flows.
Can you please elaborate how exactly the metadata would be exposed publicly?
There is the `GET /admin/clients/&lt;client_id&gt;` endpoint in the API, but that one is an admin (private) endpoint.
Is there any other way how one could access the client info only knowing the `client_id`?