Developer applications

Developer applications are OIDC clients owned by the current account. The account portal provides a friendly API; OIDC-style dynamic registration is also available. Both require an account-portal audience access token.

Account portal routes

MethodRoute
GET, POST/api/v1/me/developer-apps
GET, PUT, DELETE/api/v1/me/developer-apps/{client_id}

Create requests require client_name and one to twenty redirect_uris. Optional metadata includes scopes, client_uri, logo_uri, tos_uri, policy_uri, and up to twenty post_logout_redirect_uris.

Dynamic registration routes

MethodRoute
POST/api/oauth2/register
GET, PUT, DELETE/api/oauth2/register/{client_id}

Server-managed fields such as client_id, client secret, grant types, response types, and token endpoint authentication method cannot be supplied through this owner API. Treat any returned client secret as write-only and store it securely.

Was this page helpful?