Skip to main content
POST
Dynamically register a public OAuth client

Body

application/json
redirect_uris
string<uri>[]
required

HTTPS redirect URIs (HTTP is permitted only for localhost-like hosts); fragments are forbidden.

Required array length: 1 - 10 elements
client_name
string
Maximum string length: 200
grant_types
string[]

Informational registration metadata. The token endpoint supports only authorization_code.

token_endpoint_auth_method
enum<string>
default:none

Public PKCE clients only; no client secret is supported.

Available options:
none
scope
string

Optional client metadata; requested user-consent scopes are selected at authorization time.

Maximum string length: 500

Response

RFC 7591-style public client metadata. No client_secret is issued.

client_id
string
required

Public client identifier; it is not a secret.

client_id_issued_at
integer
required

Unix timestamp in seconds.

redirect_uris
string<uri>[]
required
token_endpoint_auth_method
enum<string>
required
Available options:
none
grant_types
string[]
required
response_types
string[]
required
Example:
client_name
string
scope
string