OAuth
Register Client
RFC 7591 dynamic client registration of a public client (no secret). Rate-limited per client IP (`OAUTH_REGISTER_RATE_LIMIT_PER_HOUR`); at most `OAUTH_MAX_CLIENTS` are kept (unused clients are evicted first, else 503).
API key access
This route has its own authentication (or none); an API key is not used here.
POST
/api/v1/oauth/registerredirect_urisarray<string>
1-10 URIs: https://, or http:// on localhost/127.0.0.1/[::1]; no fragment.
client_name?string | null
Length
length <= 200client_uri?string | null
An https:// URL.
grant_types?array<string> | null
A subset of authorization_code, refresh_token.
response_types?array<string> | null
["code"].
token_endpoint_auth_method?string | null
Response Body
curl -X POST "http://localhost:8000/api/v1/oauth/register" \ -H "Content-Type: application/json" \ -d '{ "redirect_uris": [ "string" ] }'{
"client_id": "string",
"client_id_issued_at": 0,
"client_name": "string",
"client_uri": "string",
"redirect_uris": [
"string"
],
"grant_types": [
"string"
],
"response_types": [
"string"
],
"token_endpoint_auth_method": "string"
}{
"error": "string",
"error_description": "string"
}{
"error": "string",
"error_description": "string"
}{
"error": "string",
"error_description": "string"
}