Skip to main content
PUT
Update OAuth application

Authorizations

Authorization
string
header
required

eToro OAuth2. Each operation lists the scopes that grant access as separate security requirements (OpenAPI OR semantics): the caller's token only needs ONE of them — you do NOT need all of them. The same scopes back the x-api-key/x-user-key credential pair.

Headers

x-request-id
string<uuid>
required

A unique request identifier.

Example:

"c2f6d728-b659-4c03-b20b-70306bf28417"

x-api-key
string<password>
required

API key for authentication.

Example:

"lhgfaslk21490FAScVPkdsb53F9dNkfHG4faZSG5vfjndfcfgdssdgsdHF4663"

x-user-key
string<password>
required

User-specific authentication key.

Example:

"eyJlYW4iOiJVbnJlZ2lzdGVyZWRBcHBsaWNhdGlvbiIsImVrIjoiOE5sZ2cwcW5EUVdROUFNWGpXT2lmOWktZnpidG5KcUlqWGJ3WHJZZkpZcldrbG90ZEhvLVBjSWhQaU8xU1ZtMW84aU1WZGZqN2xWNzFjLXFxLmcybXE1dnh4Q1hUT25xaWRUaTFlcEhmVk1fIn0_"

Path Parameters

clientId
string<uuid>
required

The OAuth clientId of the application to update.

Body

application/json

At least one field must be provided. Omitted fields are left unchanged.

applicationName
string

Updated display name.

Maximum string length: 100
applicationIconUrl
string<uri>

Updated icon URL.

Maximum string length: 500
scopes
object[]

Replacement set of scopes. Each scopeId must be positive and present in the cached catalog; no duplicates.

redirectUris
string<uri>[]

Replacement set of redirect URIs.

Maximum string length: 500

Response

Application updated successfully.

application
object

Full application record. The clientSecret is intentionally excluded.