Create OAuth client

POST

/oauth-clients

Last modified:2026-10-30 21:26:53

OperationId:createOauthClient

Registers an OAuth client and returns it with its whole secret, the only response that does so without include-secret=yes, so store the secret now. Requires Super User scope. Grant types, scopes, token lifetimes, and PKCE are not set per client.

Request

Authorization

Bearer Token

Provide your bearer token in the

Authorization

header when making requests to protected resources.

Example:

Authorization: Bearer ********************

Body Params application/jsonRequired

Examples

Responses

🟢200OK

application/json

The client, with its whole secret. It takes effect shortly after, so wait for it to appear in GET /oauth-clients/{client-id} before you use it.

Bodyapplication/json

🟠400Bad Request

🟠401Unauthorized

🟠403Forbidden

🟠409Conflict

Request Example

Shell

JavaScript

Java

Swift

cURL

Generated secretNo redirect URIKnown secret

curl --location 'https://awqacore01.crexendocloud.com/ns-api/v2/oauth-clients' \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '{
    "client-id": "app.example.com",
    "redirect-uri": "https://app.example.com/oauth/callback"
}'

Response Example

200 - Generated secret

{
    "client-id": "app.example.com",
    "client-secret": "{{client_secret}}",
    "redirect-uri": "https://app.example.com/oauth/callback",
    "notes": "The client secret is shown here on create. It is returned masked from now on; include-secret=yes reads it back whole."
}

Modified at 2026-10-30 21:26:53

List OAuth clients

Count OAuth clients