My point is that if you require /.well-known/openid-configuration to tell your the OAuth URLs, why not just require the OAuth URLs to be /.well-known/ope

My point is that if you require /.well-known/openid-configuration to tell your the OAuth URLs, why not just require the OAuth URLs to be /.well-known/openid/authorize /.well-known/openid/token > by not requiring the creation / new routing of those endpoints, OIDC adoption is easier on the OIDC provider side. Redirects exist though. We already have the technology, we already have the protocols, we're just inventing more stuff that we already have.