@GET
  @Path("/.well-known/openid-configuration")
  @Produces(MediaType.APPLICATION_JSON)
  public Response openIdConfiguration() {

    var body =
        new OpenIdConfiguration(
            baseUri.toString(),
            baseUri.resolve("/auth").toString(),
            baseUri.resolve("/auth/token").toString(),
            baseUri.resolve("/jwks.json").toString(),
            List.of("openid"),
            relyingPartyConfig.supportedResponseTypes(),
            List.of("authorization_code"),
            List.of("public"),
            List.of("ES256"),
            List.of(),
            List.of(),
            List.of("private_key_jwt"));

    return Response.ok(body).build();
  }
@Test
  void openIdConfiguration() {

    var config = new RelyingPartyConfig(null, null);
    var sut = new OpenIdEndpoint(BASE_URI, config, null);

    // when
    OpenIdConfiguration body;
    try (var res = sut.openIdConfiguration()) {
      body = res.readEntity(OpenIdConfiguration.class);
    }

    // then
    assertEquals(BASE_URI.toString(), body.issuer());
    assertEquals(BASE_URI.resolve("/auth").toString(), body.authorizationEndpoint());
    assertEquals(BASE_URI.resolve("/jwks.json").toString(), body.jwksUri());
    assertEquals(BASE_URI.resolve("/auth/token").toString(), body.tokenEndpoint());
    assertEquals(List.of("ES256"), body.idTokenSigningAlgValuesSupported());
  }