security

Is exposing Authority, ClientID and Scope through unprotected endpoint secure?

Recently I found an unprotected endpoint in BFF API that exposes:

Frontend consuming this endpoint uses this response to kick off AuthorizationCode + PKCE flow.
Is this secure?

You need to sign in to view this answers