Add fields to example

Signed-off-by: Kévin Commaille <zecakeh@tedomum.fr>

content/client-server-api/_index.md

@@ -2266,9 +2266,7 @@ The server SHOULD return one of the following responses:
 
 {{% added-in v="1.18" %}}
 
-All account management is done via the homeserver’s web UI as all endpoints that
-require User-Interactive Authentication are unsupported by this authentication
-API.
+All account management is done via the homeserver's web UI.
 
 This specification defines extensions to the [OAuth Authorization Server
 Metadata registry](https://www.iana.org/assignments/oauth-parameters/oauth-parameters.xhtml#authorization-server-metadata)
@@ -2307,8 +2305,8 @@ The following account management actions are defined:
 |----------------------------------|------------------------------------------------------------------------------------------------------------------------------------------------------|
 | `org.matrix.profile`             | The user wishes to view/edit their profile (name, avatar, contact details).                                                                          |
 | `org.matrix.devices_list`        | The user wishes to view a list of their devices.                                                                                                     |
-| `org.matrix.device_view`         | The user wishes to view the details of a specific device. A `device_id` should be provided.                                                          |
-| `org.matrix.device_delete`       | The user wishes to delete/log out a specific device. A `device_id` should be provided.                                                               |
+| `org.matrix.device_view`         | The user wishes to view the details of a specific device. A `device_id` SHOULD be provided.                                                          |
+| `org.matrix.device_delete`       | The user wishes to delete/log out a specific device. A `device_id` SHOULD be provided.                                                               |
 | `org.matrix.account_deactivate`  | The user wishes to deactivate their account.                                                                                                         |
 | `org.matrix.cross_signing_reset` | The user wishes to reset their cross-signing identity. Servers SHOULD use this action in the URL of the [`m.oauth`](#oauth-authentication) UIA type. |
 

data/api/client-server/oauth_server_metadata.yaml

@@ -185,6 +185,15 @@ paths:
                   "grant_types_supported": ["authorization_code", "refresh_token"],
                   "response_modes_supported": ["query", "fragment"],
                   "code_challenge_methods_supported": ["S256"],
+                  "account_management_uri": "https://account.example.com/manage",
+                  "account_management_actions_supported": [
+                    "org.matrix.profile",
+                    "org.matrix.devices_list",
+                    "org.matrix.device_view",
+                    "org.matrix.device_delete",
+                    "org.matrix.account_deactivate",
+                    "org.matrix.cross_signing_reset",
+                  ],
                 }
       tags:
         - Session management