Sign in
latestOpenAPI 3.1.02026-08-1182263351.1 KB

f8025de20169

Dynamic Client Registration

Dynamically register an OAuth2 client (RFC 7591)

Register a new OAuth2 client via unauthenticated Dynamic Client Registration.

Public/PKCE clients (token_endpoint_auth_method == "none") receive no client_secret. Confidential clients receive a one-time client_secret that cannot be retrieved again after this response.

Errors render as RFC 7591's {"error", "error_description"} shape, not api_v2's usual JSON:API envelope (mirrors token_exchange) -- see client_service.register_client's docstring for why, and for why no org is bound / audited here yet.

post/v2/oauth/register

Request body

client_namestring required
redirect_urisstring[]
grant_typesstring[] nullable
token_endpoint_auth_methodstring
scopestring nullable
resourcestring

Response

Created

client_idstring required
client_secretstring nullable
client_namestring required
redirect_urisstring[] required
grant_typesstring[] required
token_endpoint_auth_methodstring required
scopestring required