Update OAuth Client

POST

/org/:org_id/project/:project_id/oauth_client/:oauth_client_id

POST

/api/v1/org/:org_id/project/:project_id/oauth_client/:oauth_client_id

$ curl -X POST https://app.rightbrain.ai/api/v1/org/org_id/project/project_id/oauth_client/oauth_client_id \
>      -H "Authorization: Bearer <token>" \
>      -H "Content-Type: application/json" \
>      -d '{
>   "redirect_uris": [
>     "https://app.example.com/callback",
>     "https://staging.example.com/callback"
>   ]
> }'

1 {
2   "id": "019f8a01-2b21-7001-9c2b-3b6d0e5f1011",
3   "name": "Support Portal",
4   "client_id": "019f8a01-2b21-7002-9c2b-3b6d0e5f1012",
5   "project_id": "019f8a00-1a10-7002-8b1a-2a5c9d4e0002",
6   "created": "2026-02-03T08:05:00Z",
7   "modified": "2026-07-19T13:45:00Z",
8   "description": "Web app backend for the customer support portal",
9   "redirect_uris": [
10     "https://support.example.com/oauth/callback",
11     "https://staging.support.example.com/oauth/callback"
12   ],
13   "grant_types": [
14     "authorization_code",
15     "refresh_token"
16   ],
17   "client_secret": null,
18   "token_endpoint_auth_method": "client_secret_basic",
19   "pkce_required": false,
20   "pkce_challenge_method": null,
21   "deleted": null
22 }

Update OAuth client configuration.

Modifiable fields:

Redirect URIs
Grant types
Token endpoint authentication method
PKCE requirement and challenge method

Only fields present in the request are changed; omitted fields keep their current values. Disabling PKCE also clears any configured challenge method.

Update OAuth client configuration. Modifiable fields: - Redirect URIs - Grant types - Token endpoint authentication method - PKCE requirement and challenge method Only fields present in the request are changed; omitted fields keep their current values. Disabling PKCE also clears any configured challenge method.

Authentication

AuthorizationBearer

API key or access token, sent as Authorization: Bearer <token>. The simplest option: create an API key in your dashboard under Settings, then paste it here.

AuthorizationBearer

API key or access token, sent as Authorization: Bearer <token>. The simplest option: create an API key in your dashboard under Settings, then paste it here.

Path parameters

oauth_client_idstringRequiredformat: "uuid"

org_idstringRequiredformat: "uuid"

The unique identifier of the organization.

project_idstringRequiredformat: "uuid"

The unique identifier of the project.

Request

This endpoint expects an object.

redirect_urislist of strings or nullOptional

Updated list of authorized redirect URIs. All existing URIs will be replaced with this list.

grant_typeslist of enums or nullOptional

Updated list of enabled grant types. All existing grant types will be replaced with this list.

token_endpoint_auth_methodenum or nullOptional

Updated authentication method for the token endpoint.

pkce_requiredboolean or nullOptional

Whether to require PKCE for authorization code flows. IMPORTANT: Only applicable when ‘authorization_code’ is included in grant_types. Setting to True enhances security, especially for public clients.

pkce_challenge_methodenum or nullOptional

PKCE code challenge method. Only applies when PKCE is required.

Response

OAuth client updated

idstringformat: "uuid"

Unique identifier for the OAuth client.

namestring

Human-readable name for the OAuth client.

client_idstringformat: "uuid"

Unique identifier used to identify the client with the authorization server.

project_idstringformat: "uuid"

ID of the project this OAuth client belongs to.

createdstring

Timestamp when the OAuth client was created.

modifiedstring

Timestamp when the OAuth client was last modified.

descriptionstring or nullOptional

Optional description explaining the client's purpose and usage.

redirect_urislist of strings or nullOptional

List of authorized redirect URIs for OAuth flows requiring user interaction. Required for authorization code and implicit flows. Must be exact matches when used. Must use HTTPS in production (except for localhost).

grant_typeslist of enums or nullOptional

OAuth 2.0 grant types enabled for this client.

client_credentials: For server-to-server API access
authorization_code: For web and mobile apps
refresh_token: For maintaining long-term access
implicit: Legacy flow, not recommended for new applications

client_secretstring or nullOptional

Secret key used to authenticate the client. Only shown once upon creation. Must be stored securely. Required for confidential clients (e.g., server applications).

token_endpoint_auth_methodenumOptionalDefaults to client_secret_basic

Authentication method enabled for the client:

client_secret_basic: Client ID and secret sent in HTTP headers
client_secret_post: Client ID and secret sent in request body
none: No client authentication (required for public clients using PKCE)

pkce_requiredbooleanOptionalDefaults to false

Whether PKCE (Proof Key for Code Exchange) is required for this client. When enabled, authorization code flows must include code_challenge and code_verifier. Recommended for public clients (mobile apps, SPAs) and enhances security for all clients.

pkce_challenge_methodenum or nullOptionalDefaults to S256

PKCE code challenge method when PKCE is enabled.

S256: SHA256 hash of code verifier (recommended and secure)
plain: Plain text code verifier (not recommended, only for testing)

deletedstring or nullOptional

Timestamp when the OAuth client was deleted, if applicable.

Errors

400

Bad Request Error

401

Unauthorized Error

403

Forbidden Error

404

Not Found Error

422

Unprocessable Entity Error

500

Internal Server Error