Skip to main content
PUT
Update OAuth application

Authorizations

x-api-key
string
header
default:lhgfaslk21490FAScVPkdsb53F9dNkfHG4faZSG5vfjndfcfgdssdgsdHF4663
required

API key of the application. Only valid together with the x-user-key header — the pair is an alternative to OAuth bearer authentication, never sent alongside it. The pair is granted the same permissions the operation's OAuth scopes describe.

Demo credential for trying the API from these docs: lhgfaslk21490FAScVPkdsb53F9dNkfHG4faZSG5vfjndfcfgdssdgsdHF4663

x-user-key
string
header
default:eyJlYW4iOiJVbnJlZ2lzdGVyZWRBcHBsaWNhdGlvbiIsImVrIjoiOE5sZ2cwcW5EUVdROUFNWGpXT2lmOWktZnpidG5KcUlqWGJ3WHJZZkpZcldrbG90ZEhvLVBjSWhQaU8xU1ZtMW84aU1WZGZqN2xWNzFjLXFxLmcybXE1dnh4Q1hUT25xaWRUaTFlcEhmVk1fIn0_
required

User-specific authentication key. Only valid together with the x-api-key header — the pair is an alternative to OAuth bearer authentication, never sent alongside it.

Demo credential for trying the API from these docs: eyJlYW4iOiJVbnJlZ2lzdGVyZWRBcHBsaWNhdGlvbiIsImVrIjoiOE5sZ2cwcW5EUVdROUFNWGpXT2lmOWktZnpidG5KcUlqWGJ3WHJZZkpZcldrbG90ZEhvLVBjSWhQaU8xU1ZtMW84aU1WZGZqN2xWNzFjLXFxLmcybXE1dnh4Q1hUT25xaWRUaTFlcEhmVk1fIn0_

Headers

x-request-id
string<uuid>
required

A unique request identifier.

Example:

"946f2ce8-4236-498f-b001-1d4dd9b2383f"

Path Parameters

clientId
string<uuid>
required

The OAuth clientId of the application to update.

Body

application/json

At least one field must be provided. Omitted fields are left unchanged.

applicationName
string

Updated display name.

Maximum string length: 100
applicationIconUrl
string<uri>

Updated icon URL.

Maximum string length: 500
scopes
object[]

Replacement set of scopes. Each scopeId must be positive and present in the cached catalog; no duplicates.

redirectUris
string<uri>[]

Replacement set of redirect URIs.

Maximum string length: 500
allowedGcids
integer<int64>[]

GCIDs permitted to use this application. Pass an empty array to clear.

Response

Application updated successfully.

application
object

Full application record. The clientSecret is intentionally excluded.