OAuth

RFC 7591 Dynamic Client Registration

Idempotent proxy for Supabase Management API client registration.

Strict input (per RFC 7591 §2 + §3.2.2): redirect_uris is REQUIRED and must be a non-empty array. The endpoint refuses registration with invalid_redirect_uri instead of silently substituting a default.

Each redirect_uris entry must be one of:

  • https://…
  • http://localhost, http://127.0.0.1, or http://[::1] (loopback only)
  • any other RFC 3986 custom scheme (e.g. cursor://, claude://), EXCEPT javascript:, data:, file:, vbscript: (denylisted).
post/oauth/register

Request

  • Base URL: https://api.apphandoff.com/api
  • URL: https://api.apphandoff.com/api/oauth/register
  • Auth: none required

Request body

redirect_urisstring[] required

Non-empty array of valid redirect URIs.

client_namestring

Optional human-readable client name. Control characters are stripped.

Response

Client registered (or existing client returned for idempotent re-registration)

client_idstring uuid
client_id_issued_atinteger
redirect_urisstring[]
client_namestring
token_endpoint_auth_method'none'
grant_typesstring[]
response_typesstring[]

Changes

No recorded changes to this operation across all 1 revision of this API.