OAuth Clients

Get OAuth Client Details

GA

Retrieve detailed information about a specific OAuth client.

Returns the complete client configuration including:

  • Client credentials (ID and secret)
  • Authorized redirect URIs
  • Supported grant types
  • Creation and modification timestamps

Use this endpoint to:

  • Verify client configuration
  • Check authorized redirect URIs
  • Review supported grant types
  • Audit client creation/modification times

Path parameters

oauth_client_idstringRequired

The unique identifier of the OAuth client to retrieve. This is the internal UUID, not the OAuth 2.0 client_id used for authentication.

org_idstringRequired

The unique identifier of the organization that owns the project containing this OAuth client.

project_idstringRequired

The unique identifier of the project that contains this OAuth client. OAuth clients are scoped to projects for access control.

Headers

AuthorizationstringRequired

Bearer authentication of the form Bearer <token>, where token is your auth token.

Response

Successfully retrieved OAuth client details

idstringformat: "uuid"

Unique identifier for the OAuth client.

namestring

Human-readable name for the OAuth client.

client_idstringformat: "uuid"

Unique identifier used to identify the client with the authorization server.

project_idstringformat: "uuid"

ID of the project this OAuth client belongs to.

createdstring

Timestamp when the OAuth client was created.

modifiedstring

Timestamp when the OAuth client was last modified.

descriptionstringOptional

Optional description explaining the client’s purpose and usage.

redirect_urislist of stringsOptional

List of authorized redirect URIs for OAuth flows requiring user interaction. Required for authorization code and implicit flows. Must be exact matches when used. Must use HTTPS in production (except for localhost).

grant_typeslist of enumsOptional

OAuth 2.0 grant types enabled for this client.

  • client_credentials: For server-to-server API access
  • authorization_code: For web and mobile apps
  • refresh_token: For maintaining long-term access
  • implicit: Legacy flow, not recommended for new applications
Allowed values:
client_secretstringOptional

Secret key used to authenticate the client. Only shown once upon creation. Must be stored securely. Required for confidential clients (e.g., server applications).

Errors