---
title: "Update Client Secret"
method: POST
path: "/api/{serviceId}/client/secret/update/{clientIdentifier}"
tags: ["Client Management"]
---

# Update Client Secret

`POST /api/{serviceId}/client/secret/update/{clientIdentifier}`

Update the client secret of a client.

If you want to have the Authlete server generate a new value of the client secret, use `/api/client/secret/refresh`
API.

## Path parameters

- `serviceId` string, required
- `clientIdentifier` string, required

## Request body

- ClientSecretUpdateRequest
  - `clientSecret` string, required — The new value of the client secret. Valid characters for a client secret are `A-Z`, `a-z`, `0-9`, `-`, and `_`. The maximum length of a client secret is 86.

## Response `200`

- ClientSecretUpdateResponse
  - `resultCode` string — The code which represents the result of the API call.
  - `resultMessage` string — A short message which explains the result of the API call.
  - `newClientSecret` string — The new client secret.
  - `oldClientSecret` string — The old client secret.

## Other responses

- `400`
- `401`
- `403`
- `429` — The request exceeded the request rate permitted for the endpoint.
- `500`

---

[API](https://skmtc.net/authlete/apis/authlete-api.md) · [All operations](https://skmtc.net/authlete/apis/authlete-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/authlete/authlete-api/versions/7ad74ab64749/schema)