OAuth

RFC 7591 dynamic client registration

Public, unauthenticated -- that is the point of DCR. token_endpoint_auth_method is "none" (a public client, PKCE required), "client_secret_basic" or "client_secret_post" (a confidential client: the response carries a client_secret, shown once and never again). client_name may not impersonate Salt or use a reserved name.

post/api/oauth2/register

Request

  • Base URL: https://saltapp.ai
  • URL: https://saltapp.ai/api/oauth2/register
  • Auth: none required

Request body

client_namestring required
redirect_urisstring[] required
grant_typesstring[]
response_typesstring[]
token_endpoint_auth_method'none' | 'client_secret_basic' | 'client_secret_post'
client_uristring

Response

OK.

client_idstring
client_namestring
redirect_urisstring[]
grant_typesstring[]
response_typesstring[]
token_endpoint_auth_methodstring
client_id_issued_atinteger
client_secretstring

ocs_-prefixed. Only for a confidential client, only in this response.

client_secret_expires_at0

Changes

No recorded changes to this operation across all 2 revisions of this API.