https://www.ory.sh/ logo
#general
Title
# general
d

dry-book-88542

02/03/2022, 9:58 AM
A general question about using (OIDC) discovery documents (like
<https://YOUR_DOMAIN/.well-known/openid-configuration>
) came up at work: Should clients fetch discover documents for each authentication request or just once when configuring the client for the first time?
❤️ 1
l

late-france-48187

02/04/2022, 12:25 PM
I guess this should be done for each authentication request or at application startup. By doing this the client stays flexible to changes to the authorization server - no hard coded uris (except the well known endpoint).
4 Views