AM
JA
無料で始める
メニュー

Contents

OAuth2 clients and multi-tenant configurations

DELETE/api/clients/{client_id}

Permanently delete an application client. This revokes its secrets and invalidates any active sessions using this client. More OAuth

Responses
200application/json
OK
schemaobject
dataClientrequired
An application-owned client that can authenticate users and request tokens. Clients define allowed origins, redirect URIs, and token configurations for OAuth flows.
idstringrequired
Unique identifier for a client application.
application_idstringrequired
Unique identifier for an application.
audiencestringrequired
allowed_originsarrayrequired
itemstringrequired
allowed_scopestring | nullrequired
default_scopestringrequired
redirect_urisarrayrequired
itemstringrequired
seamless_sign_inbooleanrequired
login_enabledbooleanrequired
register_enabledbooleanrequired
csrf_requiredbooleanrequired
email_provider_configobject | nullrequired
providerrequired
mock_inbox_idstringrequired
access_token_configobject | nullrequired
Configuration for access tokens issued by this client. Access tokens are short-lived and authorize API requests on behalf of the user.
expires_innumber
cookie_optionsobject
Nested fields truncated. Expand to continue inline, or use the model link.
refresh_token_configobject | nullrequired
Configuration for refresh tokens issued by this client. Refresh tokens are long-lived and allow obtaining new access tokens without re-authentication.
expires_innumber
cookie_optionsobject
Nested fields truncated. Expand to continue inline, or use the model link.
id_token_configobject | nullrequired
Configuration for ID tokens issued by this client. ID tokens are JWTs containing user claims like email and name for client-side personalization.
expires_innumber
cookie_optionsobject
Nested fields truncated. Expand to continue inline, or use the model link.
external_jwks_configobject | nullrequired
jwks_urlstring
public_keysarray
Nested fields truncated. Expand to continue inline, or use the model link.
saml_configobject | nullrequired
saml_metadata_urlstring
public_keysarray
Nested fields truncated. Expand to continue inline, or use the model link.
expected_issuerstring
rate_limit_configobject | nullrequired
Configuration for rate limiting client requests. Higher limits may be useful for testing environments.
login_maxinteger
auth_maxinteger
unauth_maxinteger
application_authorityApplicationAuthority | nullApplicationAuthority
Application-owned public auth authority. Owns application-level hosted auth configuration, keys, and branding.
application_idstringrequired
Unique identifier for an application.
authority_domain_idstringrequired
Unique identifier for an application-domain link.
branding_configobjectrequired
Nested fields truncated. Expand to continue inline, or use the model link.
hosted_sso_configobjectrequired
Nested fields truncated. Expand to continue inline, or use the model link.
linksobjectrequired
400application/problem+jsonValidationProblemDetails
Bad Request
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
invalid_paramsarray
itemobjectrequired
instring
pathstring
typestring
expectedstring
receivedstring
defaultapplication/problem+jsonProblemDetails
HTTP Error
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
GET/api/clients/{client_id}

Retrieve a client application by its ID. Returns the client’s configuration including allowed origins, redirect URIs, and token settings. More OAuth

Responses
200application/json
OK
schemaobject
dataClientrequired
An application-owned client that can authenticate users and request tokens. Clients define allowed origins, redirect URIs, and token configurations for OAuth flows.
idstringrequired
Unique identifier for a client application.
application_idstringrequired
Unique identifier for an application.
audiencestringrequired
allowed_originsarrayrequired
itemstringrequired
allowed_scopestring | nullrequired
default_scopestringrequired
redirect_urisarrayrequired
itemstringrequired
seamless_sign_inbooleanrequired
login_enabledbooleanrequired
register_enabledbooleanrequired
csrf_requiredbooleanrequired
email_provider_configobject | nullrequired
providerrequired
mock_inbox_idstringrequired
access_token_configobject | nullrequired
Configuration for access tokens issued by this client. Access tokens are short-lived and authorize API requests on behalf of the user.
expires_innumber
cookie_optionsobject
Nested fields truncated. Expand to continue inline, or use the model link.
refresh_token_configobject | nullrequired
Configuration for refresh tokens issued by this client. Refresh tokens are long-lived and allow obtaining new access tokens without re-authentication.
expires_innumber
cookie_optionsobject
Nested fields truncated. Expand to continue inline, or use the model link.
id_token_configobject | nullrequired
Configuration for ID tokens issued by this client. ID tokens are JWTs containing user claims like email and name for client-side personalization.
expires_innumber
cookie_optionsobject
Nested fields truncated. Expand to continue inline, or use the model link.
external_jwks_configobject | nullrequired
jwks_urlstring
public_keysarray
Nested fields truncated. Expand to continue inline, or use the model link.
saml_configobject | nullrequired
saml_metadata_urlstring
public_keysarray
Nested fields truncated. Expand to continue inline, or use the model link.
expected_issuerstring
rate_limit_configobject | nullrequired
Configuration for rate limiting client requests. Higher limits may be useful for testing environments.
login_maxinteger
auth_maxinteger
unauth_maxinteger
application_authorityApplicationAuthority | nullApplicationAuthority
Application-owned public auth authority. Owns application-level hosted auth configuration, keys, and branding.
application_idstringrequired
Unique identifier for an application.
authority_domain_idstringrequired
Unique identifier for an application-domain link.
branding_configobjectrequired
Nested fields truncated. Expand to continue inline, or use the model link.
hosted_sso_configobjectrequired
Nested fields truncated. Expand to continue inline, or use the model link.
linksobjectrequired
selfstringrequired
URL of the current resource
400application/problem+jsonValidationProblemDetails
Bad Request
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
invalid_paramsarray
itemobjectrequired
instring
pathstring
typestring
expectedstring
receivedstring
defaultapplication/problem+jsonProblemDetails
HTTP Error
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
PATCH/api/clients/{client_id}

Update application client properties using JSON Merge Patch (RFC 7396). Modify redirect URIs, allowed origins, token settings, and more. More OAuth

Bodyapplication/json
audiencestring | null
allowed_originsarray | null
itemstringrequired
allowed_scopestring | null
default_scopestring | null
redirect_urisarray | null
itemstringrequired
seamless_sign_inboolean | null
login_enabledboolean | null
register_enabledboolean | null
csrf_requiredboolean | null
email_provider_configobject | null
provider
mock_inbox_idstring | null
access_token_configobject | null
expires_innumber | null
cookie_optionsobject | null
namestring | null
http_onlyboolean | null
secureboolean | null
same_site
max_ageinteger | null
pathstring | null
refresh_token_configobject | null
expires_innumber | null
cookie_optionsobject | null
namestring | null
http_onlyboolean | null
secureboolean | null
same_site
max_ageinteger | null
pathstring | null
id_token_configobject | null
expires_innumber | null
cookie_optionsobject | null
namestring | null
http_onlyboolean | null
secureboolean | null
same_site
max_ageinteger | null
pathstring | null
external_jwks_configobject | null
jwks_urlstring | null
public_keysarray | null
itemstringrequired
saml_configobject | null
saml_metadata_urlstring | null
public_keysarray | null
itemstringrequired
expected_issuerstring | null
rate_limit_configobject | null
login_maxinteger | null
auth_maxinteger | null
unauth_maxinteger | null
Responses
200application/json
OK
schemaobject
dataClientrequired
An application-owned client that can authenticate users and request tokens. Clients define allowed origins, redirect URIs, and token configurations for OAuth flows.
idstringrequired
Unique identifier for a client application.
application_idstringrequired
Unique identifier for an application.
audiencestringrequired
allowed_originsarrayrequired
itemstringrequired
allowed_scopestring | nullrequired
default_scopestringrequired
redirect_urisarrayrequired
itemstringrequired
seamless_sign_inbooleanrequired
login_enabledbooleanrequired
register_enabledbooleanrequired
csrf_requiredbooleanrequired
email_provider_configobject | nullrequired
providerrequired
mock_inbox_idstringrequired
access_token_configobject | nullrequired
Configuration for access tokens issued by this client. Access tokens are short-lived and authorize API requests on behalf of the user.
expires_innumber
cookie_optionsobject
Nested fields truncated. Expand to continue inline, or use the model link.
refresh_token_configobject | nullrequired
Configuration for refresh tokens issued by this client. Refresh tokens are long-lived and allow obtaining new access tokens without re-authentication.
expires_innumber
cookie_optionsobject
Nested fields truncated. Expand to continue inline, or use the model link.
id_token_configobject | nullrequired
Configuration for ID tokens issued by this client. ID tokens are JWTs containing user claims like email and name for client-side personalization.
expires_innumber
cookie_optionsobject
Nested fields truncated. Expand to continue inline, or use the model link.
external_jwks_configobject | nullrequired
jwks_urlstring
public_keysarray
Nested fields truncated. Expand to continue inline, or use the model link.
saml_configobject | nullrequired
saml_metadata_urlstring
public_keysarray
Nested fields truncated. Expand to continue inline, or use the model link.
expected_issuerstring
rate_limit_configobject | nullrequired
Configuration for rate limiting client requests. Higher limits may be useful for testing environments.
login_maxinteger
auth_maxinteger
unauth_maxinteger
application_authorityApplicationAuthority | nullApplicationAuthority
Application-owned public auth authority. Owns application-level hosted auth configuration, keys, and branding.
application_idstringrequired
Unique identifier for an application.
authority_domain_idstringrequired
Unique identifier for an application-domain link.
branding_configobjectrequired
Nested fields truncated. Expand to continue inline, or use the model link.
hosted_sso_configobjectrequired
Nested fields truncated. Expand to continue inline, or use the model link.
linksobjectrequired
selfstringrequired
URL of the current resource
400application/problem+jsonValidationProblemDetails
Bad Request
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
invalid_paramsarray
itemobjectrequired
instring
pathstring
typestring
expectedstring
receivedstring
defaultapplication/problem+jsonProblemDetails
HTTP Error
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
GET/api/clients/{client_id}/oauth-providers

List OAuth provider configurations for a client. Secrets are never returned. More

Responses
200application/json
OK
schemaobject
dataarrayrequired
itemobjectrequired
idstringrequired
Unique identifier for an OAuth provider configuration.
client_idstringrequired
Unique identifier for a client application.
providerrequired
provider_client_idstringrequired
enabledbooleanrequired
scopesstringrequired
linksobjectrequired
selfstringrequired
URL of the current page
nextstring
URL of the next page
defaultapplication/problem+jsonProblemDetails
HTTP Error
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
POST/api/clients/{client_id}/oauth-providers

Create an OAuth provider configuration for a client, including write-only secret fields. More

Bodyapplication/json
providerrequired
provider_client_idstringrequired
provider_client_secretstringrequired
enabledboolean
scopesstring
Responses
200application/json
OK
schemaobject
dataobjectrequired
idstringrequired
Unique identifier for an OAuth provider configuration.
client_idstringrequired
Unique identifier for a client application.
providerrequired
provider_client_idstringrequired
enabledbooleanrequired
scopesstringrequired
created_atstringrequired
updated_atstringrequired
linksobjectrequired
selfstringrequired
URL of the created resource
defaultapplication/problem+jsonProblemDetails
HTTP Error
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
DELETE/api/clients/{client_id}/oauth-providers/{provider}

Delete a client OAuth provider configuration and paired secrets. More

Responses
200application/json
OK
schemaobject
dataobjectrequired
idstringrequired
Unique identifier for an OAuth provider configuration.
client_idstringrequired
Unique identifier for a client application.
providerrequired
provider_client_idstringrequired
enabledbooleanrequired
scopesstringrequired
created_atstringrequired
updated_atstringrequired
linksobjectrequired
defaultapplication/problem+jsonProblemDetails
HTTP Error
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
GET/api/clients/{client_id}/oauth-providers/{provider}

Get a client OAuth provider configuration by provider key. Secrets are never returned. More

Responses
200application/json
OK
schemaobject
dataobjectrequired
idstringrequired
Unique identifier for an OAuth provider configuration.
client_idstringrequired
Unique identifier for a client application.
providerrequired
provider_client_idstringrequired
enabledbooleanrequired
scopesstringrequired
created_atstringrequired
updated_atstringrequired
linksobjectrequired
selfstringrequired
URL of the current resource
defaultapplication/problem+jsonProblemDetails
HTTP Error
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
PATCH/api/clients/{client_id}/oauth-providers/{provider}

Patch a client OAuth provider configuration. Secret fields are write-only; null clears stored secret. More

Bodyapplication/json
provider_client_idstring
provider_client_secretstring | null
enabledboolean
scopesstring
Responses
200application/json
OK
schemaobject
dataobjectrequired
idstringrequired
Unique identifier for an OAuth provider configuration.
client_idstringrequired
Unique identifier for a client application.
providerrequired
provider_client_idstringrequired
enabledbooleanrequired
scopesstringrequired
created_atstringrequired
updated_atstringrequired
linksobjectrequired
selfstringrequired
URL of the current resource
defaultapplication/problem+jsonProblemDetails
HTTP Error
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
POST/api/clients/{client_id}/oauth-providers/search

Search client OAuth provider configurations using Lucene syntax. More

Bodyapplication/json
querystringrequired
limitinteger
offsetinteger
Responses
200application/json
OK
schemaobject
dataarrayrequired
itemobjectrequired
idstringrequired
Unique identifier for an OAuth provider configuration.
client_idstringrequired
Unique identifier for a client application.
providerrequired
provider_client_idstringrequired
enabledbooleanrequired
scopesstringrequired
created_atstringrequired
updated_atstringrequired
metaobjectrequired
querystringrequired
totalnumberrequired
limitnumberrequired
offsetnumberrequired
linksobjectrequired
selfstringrequired
defaultapplication/problem+jsonProblemDetails
HTTP Error
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring

Models

ApplicationAuthority
application_idstringrequired
Unique identifier for an application.
authority_domain_idstringrequired
Unique identifier for an application-domain link.
branding_configobjectrequired
hosted_sso_configobjectrequired
Client
idstringrequired
Unique identifier for a client application.
application_idstringrequired
Unique identifier for an application.
audiencestringrequired
allowed_originsarrayrequired
itemstringrequired
allowed_scopestring | nullrequired
default_scopestringrequired
redirect_urisarrayrequired
itemstringrequired
seamless_sign_inbooleanrequired
login_enabledbooleanrequired
register_enabledbooleanrequired
csrf_requiredbooleanrequired
email_provider_configobject | nullrequired
providerrequired
mock_inbox_idstringrequired
access_token_configobject | nullrequired
Configuration for access tokens issued by this client. Access tokens are short-lived and authorize API requests on behalf of the user.
expires_innumber
cookie_optionsobject
namestringrequired
http_onlyboolean
secureboolean
same_site
max_ageintegerrequired
pathstring
refresh_token_configobject | nullrequired
Configuration for refresh tokens issued by this client. Refresh tokens are long-lived and allow obtaining new access tokens without re-authentication.
expires_innumber
cookie_optionsobject
namestringrequired
http_onlyboolean
secureboolean
same_site
max_ageintegerrequired
pathstring
id_token_configobject | nullrequired
Configuration for ID tokens issued by this client. ID tokens are JWTs containing user claims like email and name for client-side personalization.
expires_innumber
cookie_optionsobject
namestringrequired
http_onlyboolean
secureboolean
same_site
max_ageintegerrequired
pathstring
external_jwks_configobject | nullrequired
jwks_urlstring
public_keysarray
itemstringrequired
saml_configobject | nullrequired
saml_metadata_urlstring
public_keysarray
itemstringrequired
expected_issuerstring
rate_limit_configobject | nullrequired
Configuration for rate limiting client requests. Higher limits may be useful for testing environments.
login_maxinteger
auth_maxinteger
unauth_maxinteger
application_authorityApplicationAuthority | nullApplicationAuthority
Application-owned public auth authority. Owns application-level hosted auth configuration, keys, and branding.
application_idstringrequired
Unique identifier for an application.
authority_domain_idstringrequired
Unique identifier for an application-domain link.
branding_configobjectrequired
hosted_sso_configobjectrequired
ProblemDetails
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
ValidationProblemDetails
typestring · urirequired
titlestringrequired
statusintegerrequired
detailstring
instancestring · uri
codestring
invalid_paramsarray
itemobjectrequired
instring
pathstring
typestring
expectedstring
receivedstring