Update an OAuth Client

PUT

/oauth-clients/{client-id}

Last modified:2026-08-12 21:59:30

OperationId:updateOauthClient

Edits an existing OAuth client.

The client secret is left alone unless you ask for it. Send regenerate-secret=yes to rotate it — that is the only update that returns a body, carrying the new secret, and every integration using the previous secret must then be updated. A client-secret may alternatively be supplied explicitly to set a known value.

Send redirect-uri as an empty string to clear it.

At least one changed field is required; an update with nothing to change is a 400.

Requires full Super User (Super User Read Only is refused).

Request

Authorization

Bearer Token

Provide your bearer token in the

Authorization

header when making requests to protected resources.

Example:

Authorization: Bearer ********************

Path Params

Body Params application/jsonRequired

Examples

Responses

🟢200OK

application/json

Returned only when regenerate-secret=yes was passed: the new secret. Any other update returns 202 with no body.

Bodyapplication/json

🟢202Accepted

🟠400Bad Request

🟠401Unauthorized

🟠403Forbidden

🟠404Record Not Found

Request Example

Shell

JavaScript

Java

Swift

cURL

Change the redirect URI — secret is NOT rotatedClear the redirect URIRotate the secret (returns the new value)Set a specific secretNothing to change → expect 400

curl --location --request PUT 'https://awqacore01.crexendocloud.com/ns-api/v2/oauth-clients/' \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '{
    "redirect-uri": "https://portal.example.com/oauth/callback2"
}'

Response Example

200 - Secret rotated

{
    "client-id": "horizon.example",
    "client-secret": "c7a1f30b6e2d48915af0c3b8d1e26f4a",
    "notes": "The client secret was regenerated. Every integration using the previous secret must be updated."
}

Modified at 2026-08-12 21:59:30

Read an OAuth Client

Delete an OAuth Client