problem: • my dynamic client registration flow blocks certain grant types (like implicit, client_credentials, device_code) on purpose • the

.well-known/oauth-authorization-server

discovery document advertises them as supported • This creates a confusing mismatch - clients see "we support implicit flow!" but then get rejected when they try to register I don't see a configuration option to limit what is shown by the

.well-known/oauth-authorization-server

, do I need to intercept that and modify it myself?

Hey Rohit, afaik you cannot restrict the advertised grant types in the discovery document itself You can try out disabling them in Hydra in general maybe?