Replace a dynamically registered client.
PUT
/clients/{client_id}
Code sample: Shell / cURL
curl --request PUT \ --url https://auth.example.com/clients/example \ --header 'Authorization: Bearer <token>' \ --header 'Content-Type: application/json' \ --data '{ "redirect_uris": [ "https://app.example.com/callback" ], "client_name": "Example App", "grant_types": [ "authorization_code", "refresh_token" ], "response_types": [ "code" ], "scope": "openid profile email", "require_pkce": true }'Authorizations
Section titled “Authorizations ”Parameters
Section titled “ Parameters ”Path Parameters
Section titled “Path Parameters ” client_id
required
string
Request Body required
Section titled “Request Body required ” Media type application/json
object
redirect_uris
Array<string>
client_name
string
grant_types
Array<string>
response_types
Array<string>
scope
string
token_endpoint_auth_method
string
token_endpoint_auth_signing_alg
string
id_token_signed_response_alg
string
userinfo_signed_response_alg
string
request_object_signing_alg
string
backchannel_token_delivery_mode
string
backchannel_client_notification_endpoint
string format: uri
backchannel_authentication_request_signing_alg
string
backchannel_user_code_parameter
boolean
tls_client_certificate_bound_access_tokens
boolean - PS256 - EdDSA
authorization_signed_response_alg
JWS algorithm used for JWT-secured authorization responses (JARM).
string
authorization_encrypted_response_alg
JWE key-management algorithm used to encrypt JARM responses.
string
authorization_encrypted_response_enc
JWE content-encryption algorithm used to encrypt JARM responses.
string
require_pkce
boolean
client_credentials_allowed
Must be true when grant_types contains client_credentials.
boolean
allowed_scopes
Array<string>
default_scope
string
default_audience
string
default_resource
string format: uri
jwks
object
key
additional properties
jwks_uri
string format: uri
sector_identifier_uri
string format: uri
logo_uri
string format: uri
policy_uri
string format: uri
tos_uri
string format: uri
logout_webhook_uri
string format: uri
key
additional properties
Example
{ "redirect_uris": [ "https://app.example.com/callback" ], "client_name": "Example App", "grant_types": [ "authorization_code", "refresh_token" ], "response_types": [ "code" ], "scope": "openid profile email", "require_pkce": true}Responses
Section titled “ Responses ”Successful JSON response.
Media type application/json
object
client_id
required
string
client_secret
string
client_id_issued_at
required
integer
client_secret_expires_at
integer
registration_access_token
string
registration_client_uri
string format: uri
redirect_uris
required
Array<string>
require_pkce
required
boolean
token_endpoint_auth_method
string
token_endpoint_auth_signing_alg
string
id_token_signed_response_alg
string
userinfo_signed_response_alg
string
request_object_signing_alg
string
backchannel_token_delivery_mode
string
backchannel_client_notification_endpoint
string format: uri
backchannel_authentication_request_signing_alg
string
backchannel_user_code_parameter
boolean
tls_client_certificate_bound_access_tokens
boolean - PS256 - EdDSA
authorization_signed_response_alg
string
authorization_encrypted_response_alg
string
authorization_encrypted_response_enc
string
key
additional properties
Example
{ "client_id": "client_123", "client_secret": "secret_123", "client_id_issued_at": 1770000000, "client_secret_expires_at": 0, "registration_access_token": "reg_access_123", "registration_client_uri": "https://auth.example.com/clients/client_123", "redirect_uris": [ "https://app.example.com/callback" ], "require_pkce": true}OAuth error response.
Media type application/json
object
error
string
error_description
string
key
additional properties
Example generated
{ "error": "example", "error_description": "example"}