Update OAuth client configuration

patch

{protocol}://{base-url}/integration/core/v1/oauth/clients/{client_id}

Updates mutable fields of an existing OAuth client. Immutable fields (name, client_id) are ignored. Public clients must always have pkce_required = true.

Path Params

client_id

uuid

required

Unique identifier of the OAuth client.

Body Params

Partial update of an existing OAuth client. Only provide fields to change. Registration constraints apply.

redirect_uris

array of uris

length between 1 and 50

Allowed redirect URIs for OAuth callbacks.

Max 50 entries.
HTTP is allowed only for localhost or 127.0.0.1 (development).
All other URIs must use HTTPS.

redirect_uris

refresh_token_expiry

integer

259200 to 15552000

Refresh token lifetime in seconds.

Min: 259,200 (3 days)
Max: 15,552,000 (180 days)

access_token_expiry

integer

3600 to 259200

Access token lifetime in seconds.

Min: 3,600 (1 hour)
Max: 259,200 (3 days)

client_type

string

enum

The type of OAuth client.

public: Apps that cannot securely store secrets (SPAs, mobile).
confidential: Apps that can securely store secrets (backends).

Allowed:

pkce_required

boolean

Whether PKCE (Proof Key for Code Exchange) is enforced.

Must be true for public clients (defaults to true if omitted on registration).
May be true or false for confidential clients.

Responses

Language

Credentials

Bearer

URL

Loading…

Response

Choose an example:

application/json

200Client updated successfully.

400Invalid request.

401Unauthorized request.

403Forbidden request.

404Resource not found.

405Method not allowed.

500Internal server error.