{
  "issuer": "https://securetoken.google.com/whosin-258aa",
  "authorization_endpoint": "https://whos-in.app/login",
  "token_endpoint": "https://securetoken.googleapis.com/v1/token",
  "jwks_uri": "https://www.googleapis.com/service_accounts/v1/jwk/securetoken@system.gserviceaccount.com",
  "response_types_supported": ["id_token"],
  "subject_types_supported": ["public"],
  "id_token_signing_alg_values_supported": ["RS256"],
  "grant_types_supported": ["authorization_code", "refresh_token", "implicit"],
  "token_endpoint_auth_methods_supported": ["client_secret_post", "client_secret_basic"],
  "claims_supported": ["aud", "exp", "iat", "iss", "sub", "email", "email_verified", "name", "picture"],
  "scopes_supported": ["openid", "email", "profile"],
  "_note": "Who's In uses Firebase Authentication for user identity. Tokens are issued by Google's Secure Token Service on our behalf. Agent-facing first-party OAuth (with explicit consent scopes) is on the roadmap; this metadata will be updated with a whos-in.app issuer once that ships.",
  "contact": "api@whos-in.app"
}