partner-admin

Register an OAuth client for a partner

The generated client_secret is returned exactly once.

post/admin/partners/{partner_id}/oauth-clients

Path parameters

partner_idinteger required

Request body

allow_refresh_tokenboolean
allowed_scopesstring[]
client_type'confidential' | 'public'
display_namestring
homepage_urlstring nullable
is_activeboolean

Update only

privacy_policy_urlstring nullable
redirect_urisstring[]

Exact-match allowlist. No wildcards or prefix matching.

Response

Client created

active_grant_countinteger
allow_refresh_tokenboolean
allowed_scopesstring[]
client_idstring
client_secretstring

Returned once, at creation and at rotation only

client_typestring
created_timestring date-time nullable
display_namestring
has_logoboolean

Whether an RxFood-hosted logo has been uploaded

has_secretboolean
homepage_urlstring nullable
idinteger
is_activeboolean
partner_idinteger
previous_secret_expires_atstring date-time nullable

When the superseded secret stops being accepted

privacy_policy_urlstring nullable
redirect_urisstring[]
require_hospital_membershipboolean
secret_rotated_timestring date-time nullable
updated_timestring date-time nullable

Changes