From 2fbaea9f3f396a78b36182a025a2da39cf358c93 Mon Sep 17 00:00:00 2001
From: Cemal Kilic <cemalkilic96@gmail.com>
Date: Thu, 2 Oct 2025 14:40:32 +0200
Subject: [PATCH] feat(kong): Add `.well-known/oauth-authorization-server`
 endpoint routing

---
 internal/start/templates/kong.yml | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/internal/start/templates/kong.yml b/internal/start/templates/kong.yml
index d722139af..fb76e42ea 100644
--- a/internal/start/templates/kong.yml
+++ b/internal/start/templates/kong.yml
@@ -45,6 +45,16 @@ services:
           replace:
             headers:
               - "Authorization: {{ .BearerToken }}"
+  - name: well-known-oauth
+    _comment: "GoTrue: /.well-known/oauth-authorization-server -> http://auth:9999/.well-known/oauth-authorization-server"
+    url: http://{{ .GotrueId }}:9999/.well-known/oauth-authorization-server
+    routes:
+      - name: well-known-oauth
+        strip_path: true
+        paths:
+          - /.well-known/oauth-authorization-server
+    plugins:
+      - name: cors
   - name: auth-v1
     _comment: "GoTrue: /auth/v1/* -> http://auth:9999/*"
     url: http://{{ .GotrueId }}:9999/