---
title: "Changes to Create or update a domain"
method: PUT
path: "/organizations/{orgId}/environments/{envId}/domains"
---

# Changes to Create or update a domain

`PUT /organizations/{orgId}/environments/{envId}/domains`

> Every recorded change to this operation, newest first.

## Timeline

Changed in 2 of 3 revisions.

- **2026-10-09** `b0b6bdfd65cb`: 2 breaking, 4 warning, 3 info
- **2026-09-29** `821321fb3bcf`: 2 breaking, 50 info

## Changes

- **2026-10-09** `b0b6bdfd65cb`: 2 breaking, 4 warning, 3 info
  - request property `webProtectionSettings/xframe/action` was restricted to a list of enum values
  - added the pattern `^/.*` to the request property `path`
  - the `tokenExchangeSettings/maxDelegationDepth` request property's max was set to `100.00`
  - the `tokenExchangeSettings/maxDelegationDepth` request property's min was set to `1.00`
  - added the new `DENY` enum value to the `webProtectionSettings/xframe/action` response property for the response status `200`
  - added the new `SAMEORIGIN` enum value to the `webProtectionSettings/xframe/action` response property for the response status `200`
  - added the new `DENY` enum value to the request property `webProtectionSettings/xframe/action`
  - added the new `SAMEORIGIN` enum value to the request property `webProtectionSettings/xframe/action`
  - the `path` response's property pattern `^/.*` was added for the status `200`
- **2026-09-29** `821321fb3bcf`: 2 breaking, 50 info
  - the response property `dataPlaneId` became optional for the status `200`
  - the `dataPlaneId` response property's minLength was decreased from `1` to `0` for the response status `200`
  - added the new optional `query` request parameter `dryRun`
  - added the new optional request property `corsSettings/inherited`
  - added the new optional request property `keyRetrievalSettings`
  - added the new optional request property `tokenExchangeSettings/idJagSettings`
  - added the new optional request property `webProtectionSettings`
  - the request property `dataPlaneId` became optional
  - the `alertEnabled` request property default value `false` was added
  - the `authReqExpiry` request property default value `600` was added
  - the `bindingMessageLength` request property default value `256` was added
  - the `defaultAllowedAlgorithms` request property default value `RS256, RS384, RS512, ES256, ES384, ES512, EdDSA` was added
  - the `tokenReqInterval` request property default value `5` was added
  - the `allowPrivateIpAddress` request property default value `false` was removed
  - the `allowUnsecuredHttpUri` request property default value `false` was removed
  - the `cacheMaxEntries` request property default value `50` was removed
  - the `cacheTtlSeconds` request property default value `300` was removed
  - the `fetchTimeoutMs` request property default value `5000` was removed
  - the `maxResponseSizeKb` request property default value `32` was removed
  - request property `oidc/workloadIdentitySettings/allowPrivateIpAddress` deprecated
  - request property `oidc/workloadIdentitySettings/allowUnsecuredHttpUri` deprecated
  - request property `oidc/workloadIdentitySettings/cacheMaxEntries` deprecated
  - request property `oidc/workloadIdentitySettings/cacheTtlSeconds` deprecated
  - request property `oidc/workloadIdentitySettings/fetchTimeoutMs` deprecated
  - request property `oidc/workloadIdentitySettings/maxResponseSizeKb` deprecated
  - request property `tokenExchangeSettings/trustedIssuers` deprecated
  - request property `tokenExchangeSettings/trustedIssuers/items/` deprecated
  - the `dataPlaneId` request property's minLength was decreased from `1` to `0`
  - added the optional property `corsSettings/inherited` to the response with the `200` status
  - added the optional property `dryRunErrors` to the response with the `200` status
  - added the optional property `keyRetrievalSettings` to the response with the `200` status
  - added the optional property `tokenExchangeSettings/idJagSettings` to the response with the `200` status
  - added the optional property `webProtectionSettings` to the response with the `200` status
  - the `alertEnabled` response's property default value `false` was added for the status `200`
  - the `authReqExpiry` response's property default value `600` was added for the status `200`
  - the `bindingMessageLength` response's property default value `256` was added for the status `200`
  - the `defaultAllowedAlgorithms` response's property default value `RS256, RS384, RS512, ES256, ES384, ES512, EdDSA` was added for the status `200`
  - the `tokenReqInterval` response's property default value `5` was added for the status `200`
  - the `allowPrivateIpAddress` response's property default value `false` was removed for the status `200`
  - the `allowUnsecuredHttpUri` response's property default value `false` was removed for the status `200`
  - …12 more

---

[Operation](https://skmtc.dev/gravitee-io/apis/gravitee-io-am-automation-api/docs/organizations/:orgId/environments/:envId/domains/put.md) - [API](https://skmtc.dev/gravitee-io/apis/gravitee-io-am-automation-api.md) - [Page](https://skmtc.dev/gravitee-io/apis/gravitee-io-am-automation-api/changes/organizations/:orgId/environments/:envId/domains/put)