oauth

Dynamic client registration (RFC 7591). Public clients only: the response carries no `client_secret`, and any `token_endpoint_auth_method` other than `"none"` is refused rather than silently downgraded.

post/oauth/register

Request

  • Base URL: https://api.mapmap.ai
  • URL: https://api.mapmap.ai/oauth/register
  • Auth: none declared

Request body

client_namestring nullable

Display name shown on the consent card.

redirect_urisstring[] required

Redirect URIs this client will use. https anywhere, or http on a loopback address for native/CLI clients.

token_endpoint_auth_methodstring nullable

Must be "none" when given: this server registers public clients only and issues no client secrets.

Response

Client registered

client_idstring required

The issued client id (UUID). There is no client secret.

client_id_issued_atinteger required

Unix timestamp of issuance.

client_namestring required

Display name recorded for this client.

grant_typesstring[] required

Always ["authorization_code","refresh_token"].

redirect_urisstring[] required

The accepted redirect URIs, echoed.

response_typesstring[] required

Always ["code"].

token_endpoint_auth_methodstring required

Always "none", public clients only.

Changes

No recorded changes to this operation across all 1 revision of this API.