SUsupabase
admin
oauth-server

Register OAuth client (admin)

Changed on

Manually register a new OAuth client (admin endpoint). Only available when OAuth server is enabled.

post/admin/oauth/clients

Request

  • Base URL
    https://abcdefghijklmnopqrst.supabase.co/auth/v1
  • URL
    https://abcdefghijklmnopqrst.supabase.co/auth/v1/admin/oauth/clients
  • Auth
    API key in header apikey and HTTP bearer

Request body

client_namestring required

Human-readable name of the client application

client_uristring uri

URL of the client application's homepage

logo_uristring uri

URL of the client application's logo

redirect_urisstring[] required

Array of redirect URIs used by the client (maximum 10)

client_type'public' | 'confidential'

Type of the client. Optional. If not provided, will be inferred from token_endpoint_auth_method or defaults to 'confidential'. Public clients are used for applications that cannot securely store credentials (e.g., SPAs, mobile apps). Confidential clients can securely store credentials (e.g., server-side applications).

token_endpoint_auth_method'none' | 'client_secret_basic' | 'client_secret_post'

Authentication method for the token endpoint. Optional. 'none' is for public clients, 'client_secret_basic' and 'client_secret_post' are for confidential clients. If provided, must be consistent with client_type. If not provided, will be inferred from client_type.

grant_typesstring[]

OAuth grant types the client will use (defaults to both if not specified)

response_typesstring[]

OAuth response types the client can use

scopestring

Space-separated list of scope values

Response

OAuth client created

client_idstring

Unique client identifier

client_namestring

Human-readable name of the client application

client_secretstring

Client secret for confidential clients (only returned on registration/regeneration)

client_type'public' | 'confidential'

Type of the client

token_endpoint_auth_method'none' | 'client_secret_basic' | 'client_secret_post'

Authentication method for the token endpoint

registration_type'dynamic' | 'manual'

Registration type of the client

client_uristring uri

URL of the client application's homepage

logo_uristring uri

URL of the client application's logo

redirect_urisstring[]

Array of redirect URIs used by the client

grant_typesstring[]

OAuth grant types the client is authorized to use

response_typesstring[]

OAuth response types the client can use

scopestring

Space-separated list of scope values

created_atstring date-time
updated_atstring date-time

Changes

  • 9111cd4c70ebRevision changes
    • info

      added the new optional request property

    • info

      added the new optional request property

    • info

      added the new optional request property

    • info

      added the optional property to the response with the status

  • f782805361edRevision changes
    • info

      endpoint added