OAuth 2.0 Protected Resource Metadata (RFC 9728).
Serialize to the RFC 9728 metadata document a protected resource server publishes at /.well-known/oauth-protected-resource. resource and authorization_servers are always present; scopes_supported is emitted only when non-empty.
OAuth 2.0 Protected Resource Metadata (RFC 9728).