auth

Register an OAuth client (RFC 7591)

Anonymous, per-IP rate limited (20/hr, fails closed). Public clients only: token_endpoint_auth_method must be absent or none and no secret is issued. redirect_uris must be https, or http on 127.0.0.1 / localhost / [::1] (matched port-agnostically at authorize time). Unknown metadata is ignored and not stored. 404 unless the deployment sets OAUTH_CODE_FLOW_ENABLED=true.

post/api/oauth/register

Request

  • Base URL: https://www.immersivecommons.com
  • URL: https://www.immersivecommons.com/api/oauth/register
  • Auth: none required

Request body

redirect_urisstring[] required
client_namestring

Shown to the member as unverified. Control characters stripped; max 80.

token_endpoint_auth_method'none'
grant_typesstring[]
response_typesstring[]

Response

Client registered.

client_idstring required

oac_...

client_id_issued_atinteger

Unix seconds.

client_namestring
redirect_urisstring[] required
grant_typesstring[]
response_typesstring[]
token_endpoint_auth_method'none' required

Changes

No recorded changes to this operation across all 1 revision of this API.