---
title: "Changes to Update Service"
method: POST
path: "/api/{serviceId}/service/update"
---

# Changes to Update Service

`POST /api/{serviceId}/service/update`

> Every recorded change to this operation, newest first.

## Timeline

Changed in 9 of 19 revisions.

- **2026-10-28** `add809c8fb0f`: 24 info
- **2026-10-19** `bc25340fc023`: 108 breaking, 36 warning, 267 info
- **2026-08-03** `7ad74ab64749`: 3 warning, 40 info
- **2026-04-08** `8974f967c0ec`: 3 info
- **2026-04-08** `e8d6a1eb26b8`: 3 info
- **2025-12-18** `504771740022`: 6 info
- **2025-12-15** `07644fe9fbd8`: 15 info
- **2025-12-15** `5627d7cc0158`: 1 breaking, 8 info
- **2025-11-24** `8d73d5938a68`: 4 breaking, 2 info

## Changes

- **2026-10-28** `add809c8fb0f`: 24 info
  - added the new optional request property `credentialIssuerMetadata/allOf[#/components/schemas/credential_issuer_metadata]/credentialRequestEncryptionEncValuesSupported` (media type: application/json)
  - added the new optional request property `credentialIssuerMetadata/allOf[#/components/schemas/credential_issuer_metadata]/credentialRequestEncryptionEncValuesSupported` (media type: application/x-www-form-urlencoded)
  - added the new optional request property `credentialIssuerMetadata/allOf[#/components/schemas/credential_issuer_metadata]/credentialRequestEncryptionJwks` (media type: application/json)
  - added the new optional request property `credentialIssuerMetadata/allOf[#/components/schemas/credential_issuer_metadata]/credentialRequestEncryptionJwks` (media type: application/x-www-form-urlencoded)
  - added the new optional request property `credentialIssuerMetadata/allOf[#/components/schemas/credential_issuer_metadata]/credentialRequestEncryptionZipValuesSupported` (media type: application/json)
  - added the new optional request property `credentialIssuerMetadata/allOf[#/components/schemas/credential_issuer_metadata]/credentialRequestEncryptionZipValuesSupported` (media type: application/x-www-form-urlencoded)
  - added the new optional request property `credentialIssuerMetadata/allOf[#/components/schemas/credential_issuer_metadata]/display` (media type: application/json)
  - added the new optional request property `credentialIssuerMetadata/allOf[#/components/schemas/credential_issuer_metadata]/display` (media type: application/x-www-form-urlencoded)
  - added the new optional request property `credentialIssuerMetadata/allOf[#/components/schemas/credential_issuer_metadata]/nonceEndpoint` (media type: application/json)
  - added the new optional request property `credentialIssuerMetadata/allOf[#/components/schemas/credential_issuer_metadata]/nonceEndpoint` (media type: application/x-www-form-urlencoded)
  - added the new optional request property `credentialIssuerMetadata/allOf[#/components/schemas/credential_issuer_metadata]/notificationEndpoint` (media type: application/json)
  - added the new optional request property `credentialIssuerMetadata/allOf[#/components/schemas/credential_issuer_metadata]/notificationEndpoint` (media type: application/x-www-form-urlencoded)
  - added the new optional request property `returnFullPayload` (media type: application/json)
  - added the new optional request property `returnFullPayload` (media type: application/x-www-form-urlencoded)
  - the request optional property `supportedAcrs` became not read-only (media type: application/json)
  - the request optional property `supportedAcrs` became not read-only (media type: application/x-www-form-urlencoded)
  - added the optional property `credentialIssuerMetadata/allOf[#/components/schemas/credential_issuer_metadata]/credentialRequestEncryptionEncValuesSupported` to the response with the `200` status
  - added the optional property `credentialIssuerMetadata/allOf[#/components/schemas/credential_issuer_metadata]/credentialRequestEncryptionJwks` to the response with the `200` status
  - added the optional property `credentialIssuerMetadata/allOf[#/components/schemas/credential_issuer_metadata]/credentialRequestEncryptionZipValuesSupported` to the response with the `200` status
  - added the optional property `credentialIssuerMetadata/allOf[#/components/schemas/credential_issuer_metadata]/display` to the response with the `200` status
  - added the optional property `credentialIssuerMetadata/allOf[#/components/schemas/credential_issuer_metadata]/nonceEndpoint` to the response with the `200` status
  - added the optional property `credentialIssuerMetadata/allOf[#/components/schemas/credential_issuer_metadata]/notificationEndpoint` to the response with the `200` status
  - added the optional property `returnFullPayload` to the response with the `200` status
  - the response optional property `supportedAcrs` became not read-only for the status `200`
- **2026-10-19** `bc25340fc023`: 108 breaking, 36 warning, 267 info
  - added `#/components/schemas/credential_issuer_metadata` to the `credentialIssuerMetadata` request property `allOf` list (media type: application/json)
  - added `#/components/schemas/credential_issuer_metadata` to the `credentialIssuerMetadata` request property `allOf` list (media type: application/x-www-form-urlencoded)
  - added `#/components/schemas/user_code_charset` to the `userCodeCharset` request property `allOf` list (media type: application/json)
  - added `#/components/schemas/user_code_charset` to the `userCodeCharset` request property `allOf` list (media type: application/x-www-form-urlencoded)
  - removed the enum value `BASE20` of the request property `userCodeCharset` (media type: application/json)
  - removed the enum value `BASE20` of the request property `userCodeCharset` (media type: application/x-www-form-urlencoded)
  - removed the enum value `NUMERIC` of the request property `userCodeCharset` (media type: application/json)
  - removed the enum value `NUMERIC` of the request property `userCodeCharset` (media type: application/x-www-form-urlencoded)
  - the `credentialIssuerMetadata` request property type changed from `object` to no type (media type: application/json)
  - the `userCodeCharset` request property type changed from `string` to no type (media type: application/json)
  - the response property `accessTokenSignatureKeyId` became nullable for the status `200`
  - the response property `accessTokenType` became nullable for the status `200`
  - the response property `apiSecret` became nullable for the status `200`
  - the response property `attributes` became nullable for the status `200`
  - the response property `authenticationCallbackApiKey` became nullable for the status `200`
  - the response property `authenticationCallbackApiSecret` became nullable for the status `200`
  - the response property `authenticationCallbackEndpoint` became nullable for the status `200`
  - the response property `authorityHints` became nullable for the status `200`
  - the response property `authorizationEndpoint` became nullable for the status `200`
  - the response property `authorizationSignatureKeyId` became nullable for the status `200`
  - the response property `backchannelAuthenticationEndpoint` became nullable for the status `200`
  - the response property `cimdAllowlist` became nullable for the status `200`
  - the response property `cimdMetadataPolicy` became nullable for the status `200`
  - the response property `clientAttesterRoots` became nullable for the status `200`
  - the response property `credentialIssuerMetadata` became nullable for the status `200`
  - the response property `credentialJwks` became nullable for the status `200`
  - the response property `credentialJwksUri` became nullable for the status `200`
  - the response property `description` became nullable for the status `200`
  - the response property `developerAuthenticationCallbackApiKey` became nullable for the status `200`
  - the response property `developerAuthenticationCallbackApiSecret` became nullable for the status `200`
  - the response property `developerAuthenticationCallbackEndpoint` became nullable for the status `200`
  - the response property `deviceAuthorizationEndpoint` became nullable for the status `200`
  - the response property `deviceVerificationUri` became nullable for the status `200`
  - the response property `deviceVerificationUriComplete` became nullable for the status `200`
  - the response property `endSessionEndpoint` became nullable for the status `200`
  - the response property `fapiModes` became nullable for the status `200`
  - the response property `federationJwks` became nullable for the status `200`
  - the response property `federationRegistrationEndpoint` became nullable for the status `200`
  - the response property `federationSignatureKeyId` became nullable for the status `200`
  - the response property `grantManagementEndpoint` became nullable for the status `200`
  - …371 more
- **2026-08-03** `7ad74ab64749`: 3 warning, 40 info
  - added the new `SPIFFE_JWT` enum value to the `supportedIntrospectionAuthMethods/items/` response property for the response status `200`
  - added the new `SPIFFE_JWT` enum value to the `supportedRevocationAuthMethods/items/` response property for the response status `200`
  - added the new `SPIFFE_JWT` enum value to the `supportedTokenAuthMethods/items/` response property for the response status `200`
  - added the new optional request property `backchannelLogoutSessionSupported` (media type: application/json)
  - added the new optional request property `backchannelLogoutSessionSupported` (media type: application/x-www-form-urlencoded)
  - added the new optional request property `backchannelLogoutSupported` (media type: application/json)
  - added the new optional request property `backchannelLogoutSupported` (media type: application/x-www-form-urlencoded)
  - added the new optional request property `clientAttesterRoots` (media type: application/json)
  - added the new optional request property `clientAttesterRoots` (media type: application/x-www-form-urlencoded)
  - added the new optional request property `clientAttesterRootsEnabled` (media type: application/json)
  - added the new optional request property `clientAttesterRootsEnabled` (media type: application/x-www-form-urlencoded)
  - added the new optional request property `clientAttesterRootsOnly` (media type: application/json)
  - added the new optional request property `clientAttesterRootsOnly` (media type: application/x-www-form-urlencoded)
  - added the new optional request property `credentialIssuerMetadata/batchSize` (media type: application/json)
  - added the new optional request property `credentialIssuerMetadata/batchSize` (media type: application/x-www-form-urlencoded)
  - added the new optional request property `credentialIssuerMetadata/credentialResponseEncryptionZipValuesSupported` (media type: application/json)
  - added the new optional request property `credentialIssuerMetadata/credentialResponseEncryptionZipValuesSupported` (media type: application/x-www-form-urlencoded)
  - added the new optional request property `credentialIssuerMetadata/requireCredentialRequestEncryption` (media type: application/json)
  - added the new optional request property `credentialIssuerMetadata/requireCredentialRequestEncryption` (media type: application/x-www-form-urlencoded)
  - added the new optional request property `keyAttesterRoots` (media type: application/json)
  - added the new optional request property `keyAttesterRoots` (media type: application/x-www-form-urlencoded)
  - added the new optional request property `keyAttesterRootsEnabled` (media type: application/json)
  - added the new optional request property `keyAttesterRootsEnabled` (media type: application/x-www-form-urlencoded)
  - added the new optional request property `keyAttesterRootsOnly` (media type: application/json)
  - added the new optional request property `keyAttesterRootsOnly` (media type: application/x-www-form-urlencoded)
  - added the new `SPIFFE_JWT` enum value to the request property `supportedIntrospectionAuthMethods/items/` (media type: application/json)
  - added the new `SPIFFE_JWT` enum value to the request property `supportedIntrospectionAuthMethods/items/` (media type: application/x-www-form-urlencoded)
  - added the new `SPIFFE_JWT` enum value to the request property `supportedRevocationAuthMethods/items/` (media type: application/json)
  - added the new `SPIFFE_JWT` enum value to the request property `supportedRevocationAuthMethods/items/` (media type: application/x-www-form-urlencoded)
  - added the new `SPIFFE_JWT` enum value to the request property `supportedTokenAuthMethods/items/` (media type: application/json)
  - added the new `SPIFFE_JWT` enum value to the request property `supportedTokenAuthMethods/items/` (media type: application/x-www-form-urlencoded)
  - added the non-success response with the status `429`
  - added the optional property `backchannelLogoutSessionSupported` to the response with the `200` status
  - added the optional property `backchannelLogoutSupported` to the response with the `200` status
  - added the optional property `clientAttesterRoots` to the response with the `200` status
  - added the optional property `clientAttesterRootsEnabled` to the response with the `200` status
  - added the optional property `clientAttesterRootsOnly` to the response with the `200` status
  - added the optional property `credentialIssuerMetadata/batchSize` to the response with the `200` status
  - added the optional property `credentialIssuerMetadata/credentialResponseEncryptionZipValuesSupported` to the response with the `200` status
  - added the optional property `credentialIssuerMetadata/requireCredentialRequestEncryption` to the response with the `200` status
  - …3 more
- **2026-04-08** `8974f967c0ec`: 3 info
  - added the new optional request property `attestationChallengeTimeWindow` (media type: application/json)
  - added the new optional request property `attestationChallengeTimeWindow` (media type: application/x-www-form-urlencoded)
  - added the optional property `attestationChallengeTimeWindow` to the response with the `200` status
- **2026-04-08** `e8d6a1eb26b8`: 3 info
  - added the new optional request property `authorizationCodeDuration` (media type: application/json)
  - added the new optional request property `authorizationCodeDuration` (media type: application/x-www-form-urlencoded)
  - added the optional property `authorizationCodeDuration` to the response with the `200` status
- **2025-12-18** `504771740022`: 6 info
  - added the new optional request property `cimdAllowlist` (media type: application/json)
  - added the new optional request property `cimdAllowlist` (media type: application/x-www-form-urlencoded)
  - added the new optional request property `httpAliasProhibited` (media type: application/json)
  - added the new optional request property `httpAliasProhibited` (media type: application/x-www-form-urlencoded)
  - added the optional property `cimdAllowlist` to the response with the `200` status
  - added the optional property `httpAliasProhibited` to the response with the `200` status
- **2025-12-15** `07644fe9fbd8`: 15 info
  - added the new optional request property `cimdAllowlistEnabled` (media type: application/json)
  - added the new optional request property `cimdAllowlistEnabled` (media type: application/x-www-form-urlencoded)
  - added the new optional request property `cimdAlwaysRetrieved` (media type: application/json)
  - added the new optional request property `cimdAlwaysRetrieved` (media type: application/x-www-form-urlencoded)
  - added the new optional request property `cimdHttpPermitted` (media type: application/json)
  - added the new optional request property `cimdHttpPermitted` (media type: application/x-www-form-urlencoded)
  - added the new optional request property `cimdQueryPermitted` (media type: application/json)
  - added the new optional request property `cimdQueryPermitted` (media type: application/x-www-form-urlencoded)
  - added the new optional request property `clientIdMetadataDocumentSupported` (media type: application/json)
  - added the new optional request property `clientIdMetadataDocumentSupported` (media type: application/x-www-form-urlencoded)
  - added the optional property `cimdAllowlistEnabled` to the response with the `200` status
  - added the optional property `cimdAlwaysRetrieved` to the response with the `200` status
  - added the optional property `cimdHttpPermitted` to the response with the `200` status
  - added the optional property `cimdQueryPermitted` to the response with the `200` status
  - added the optional property `clientIdMetadataDocumentSupported` to the response with the `200` status
- **2025-12-15** `5627d7cc0158`: 1 breaking, 8 info
  - the response property `accessTokenSignAlg` became nullable for the status `200`
  - added the new optional request property `cimdMetadataPolicy` (media type: application/json)
  - added the new optional request property `cimdMetadataPolicy` (media type: application/x-www-form-urlencoded)
  - added the new optional request property `cimdMetadataPolicyEnabled` (media type: application/json)
  - added the new optional request property `cimdMetadataPolicyEnabled` (media type: application/x-www-form-urlencoded)
  - the request property `accessTokenSignAlg` became nullable (media type: application/json)
  - the request property `accessTokenSignAlg` became nullable (media type: application/x-www-form-urlencoded)
  - added the optional property `cimdMetadataPolicy` to the response with the `200` status
  - added the optional property `cimdMetadataPolicyEnabled` to the response with the `200` status
- **2025-11-24** `8d73d5938a68`: 4 breaking, 2 info
  - the `credentialIssuerMetadata/credentialEndpoint` request property type changed from `boolean` to `string`, and format from no format to `uri` (media type: application/json)
  - the `credentialIssuerMetadata/credentialsSupported` request property type changed from `boolean` to `string` (media type: application/json)
  - the `credentialIssuerMetadata/credentialEndpoint` response's property type changed from `boolean` to `string`, and format from no format to `uri` for status `200`
  - the `credentialIssuerMetadata/credentialsSupported` response's property type changed from `boolean` to `string` for status `200`
  - the `credentialIssuerMetadata/credentialEndpoint` request property type was generalized from `boolean` to `string`, and format from no format to `uri` (media type: application/x-www-form-urlencoded)
  - the `credentialIssuerMetadata/credentialsSupported` request property type was generalized from `boolean` to `string` (media type: application/x-www-form-urlencoded)

---

[Operation](https://skmtc.dev/authlete/apis/authlete-api/docs/api/:serviceId/service/update/post.md) - [API](https://skmtc.dev/authlete/apis/authlete-api.md) - [Page](https://skmtc.dev/authlete/apis/authlete-api/changes/api/:serviceId/service/update/post)