Configs

Update CIMD config

Changed on

Update the tenant-level OAuth Client ID Metadata Document (CIMD) configuration. Enabling requires the OIDC provider SSRF protection to be active.

patch/api/configs/cimd

Request

  • Base URL: https://[tenant_id].logto.app
  • URL: https://[tenant_id].logto.app/api/configs/cimd
  • Auth: OAuth 2 (client credentials, token URL /oidc/token, scopes: all)

Request body

enabledboolean

Whether CIMD is enabled for the tenant.

addConsentPromptForOfflineAccessboolean

Experimental. When enabled, Logto adds consent to the prompt parameter of CIMD authorization requests that include the offline_access scope without it, so the client can receive a refresh token. Requests with prompt=none are not changed. Defaults to false.

Response

The updated CIMD configuration.

enabledboolean required
addConsentPromptForOfflineAccessboolean

Experimental. When enabled, Logto adds consent to the prompt parameter of CIMD authorization requests that include the offline_access scope without it, so the client can receive a refresh token. Requests with prompt=none are not changed. Defaults to false.

Changes