---
title: "Rotate a confidential application secret"
method: POST
path: "/admin/external-applications/{id}/rotate-secret"
tags: ["Admin"]
---

# Rotate a confidential application secret

`POST /admin/external-applications/{id}/rotate-secret`

## Request

- Base URL: `https://app.openpo.st/api/v1`
- URL: `https://app.openpo.st/api/v1/admin/external-applications/{id}/rotate-secret`
- Auth: one of:
  - HTTP bearer
  - API key in cookie `openpost_session`

## Path parameters

- `id` string, required

## Response `200`

OK

- RotateExternalApplicationSecretOutputBody
  - `$schema` string, uri: A URL to the JSON Schema for this object.
  - `client_secret` string, required: Replacement confidential client secret. Returned once.

## Other responses

- `400`: Bad Request
- `403`: Forbidden
- `404`: Not Found
- `422`: Unprocessable Entity
- `500`: Internal Server Error

---

[API](https://skmtc.dev/openpo/apis/openpost-api.md) · [All operations](https://skmtc.dev/openpo/apis/openpost-api/llms.txt) · [OpenAPI document](https://skmtc.dev/openpo/apis/openpost-api/revisions/67d3964458a7?raw)