OAuth Applications API
The OAuth Applications API manages OAuth 2.0 applications for organizations. This API is available to both individual and organization accounts.
Quick Navigation
Overview
This module provides:
- OAuth application registration and management
- Client ID and secret generation
- Application lifecycle management
- Secret regeneration
- Application revocation
Base Path
All OAuth application endpoints are prefixed with /api/v1/organizations/{org_id}/oauth-applications
Authentication
All endpoints require authentication:
Authorization: Bearer <access_token>
Permissions
- Only organization administrators can manage OAuth applications
- Applications are scoped to a specific organization
Endpoints
| Method | Endpoint | Description |
|---|---|---|
| POST | / | Create OAuth application |
| GET | / | List OAuth applications |
| GET | /{app_id} | Get OAuth application details |
| PATCH | /{app_id} | Update OAuth application |
| DELETE | /{app_id} | Delete OAuth application |
| POST | /{app_id}/regenerate-secret | Regenerate client secret |
| POST | /{app_id}/revoke | Revoke OAuth application |
Internal Notes
- All endpoints are fully implemented
- Client secrets are shown only once at creation/regeneration
- Supports authorization_code and client_credentials grant types
- Applications can have multiple redirect URIs
- Organization-scoped scopes
Swagger Documentation
Interactive API documentation available at: /docs#/oauth-applications