Storyden
Auth

O Auth Client List

List OAuth clients created by the authenticated account. This is the member-facing "apps I created" view. OAuth clients are application definitions: client ID, client type, redirect URIs, allowed scopes, and allowed grants. This does not list built-in first-party clients or third-party apps the member has merely authorised. Use `/auth/oauth/tokens` for the "apps I have authorised" view.

List OAuth clients created by the authenticated account.

This is the member-facing "apps I created" view. OAuth clients are application definitions: client ID, client type, redirect URIs, allowed scopes, and allowed grants.

This does not list built-in first-party clients or third-party apps the member has merely authorised. Use /auth/oauth/tokens for the "apps I have authorised" view.

GET/auth/oauth/clients

Authorization

browser
storyden-session<token>

In: cookie

Response Body

application/json

application/json

curl -X GET "https://loading/api/auth/oauth/clients"
{
  "clients": [
    {
      "id": "cc5lnd2s1s4652adtu50",
      "createdAt": "2019-08-24T14:15:22Z",
      "updatedAt": "2019-08-24T14:15:22Z",
      "account_id": "cc5lnd2s1s4652adtu50",
      "client_id": "string",
      "name": "string",
      "type": "public",
      "scope_policy": "explicit",
      "redirect_uris": [
        "http://example.com"
      ],
      "allowed_scopes": [
        "string"
      ],
      "allowed_grants": [
        "string"
      ]
    }
  ]
}
Empty
{
  "error": "string",
  "message": "string",
  "suggested": "string",
  "metadata": {}
}
Edit on GitHub

O Auth Client Get GET

Read an OAuth client created by the authenticated account. Member-created clients are third-party application identities. They may be public or confidential but are never first-party inherited-permission clients.

O Auth Client Update PATCH

Update an OAuth client created by the authenticated account. Allowed scopes must remain within the authenticated account's current permissions. If the account has `ADMINISTRATOR`, it may configure any Storyden permission scope because `ADMINISTRATOR` implicitly grants all permissions. Changing allowed scopes affects future grants and refreshes but does not immediately invalidate already-issued JWT access tokens.