List OAuth clients
GET
/v1/oauth-clientsAuthorization
AuthorizationBearer token · headerrequiredQuery parameters
limitinteger<int64>min 1 · max 200
afterstring<uuid>Rows past this id in `order`'s direction: a page's `next_cursor`.
beforestring<uuid>Rows just before this id, still in `order`'s direction: a page's `prev_cursor`.
orderOrderParamNewest first when omitted.
Allowed:
ascdescHeader parameters
Kikuvi-Workspacestring<uuid>Workspace to list from. Required for a user caller; implied by the key for an API key caller.
Responses
200One page, newest first unless order=asc; never a secret.
itemsOAuthClientBody[]requiredShow propertiesHide properties
Array of
OAuthClientBodyauthorization_endpointstringrequiredauthorization_paramsAuthorizationParamBody[]requiredShow propertiesHide properties
Array of
AuthorizationParamBodynamestringrequiredLetters, digits, and `-._~`; none Subako sets itself (`response_type`,
`client_id`, `redirect_uri`, `state`, `code_challenge`,
`code_challenge_method`, `scope`, `resource`).
min length 1 · max length 64
valuestringrequiredmax length 512
client_idstringrequiredcreated_atstring<date-time>requireddisplay_namestringrequiredidstring<uuid>requiredscopesOAuthScopeBody[]requiredtoken_endpointstringrequiredtoken_endpoint_auth_methodTokenEndpointAuthMethodBodyrequiredHow the client authenticates at the token endpoint, without its secret.
Allowed:
noneclient_secret_postclient_secret_basicupdated_atstring<date-time>requiredworkspace_idstring<uuid>requirednext_cursorstring<uuid> | nullrequiredPass back as `after` for the next page; `null` on the last page.
prev_cursorstring<uuid> | nullrequiredPass back as `before` for the previous page; `null` on the first page.
400Bad limit, cursor, or order, a malformed workspace header, or a user caller with no workspace header.
errorErrorDetailrequiredWhat went wrong: a `code` to branch on and a `message` to show. The
message is written for a person and may change; the code will not.
Show propertiesHide properties
codeErrorCoderequiredThe machine-readable half of an error response, and the field a client
branches on. Closed: every error carries exactly one of these.
Allowed:
unauthorizedforbiddennot_foundinvalid_requestconflictclient_outdatedprecondition_failedtoo_many_requestsinternalmessagestringrequired401Missing, malformed, or invalid bearer token.
errorErrorDetailrequiredWhat went wrong: a `code` to branch on and a `message` to show. The
message is written for a person and may change; the code will not.
Show propertiesHide properties
codeErrorCoderequiredThe machine-readable half of an error response, and the field a client
branches on. Closed: every error carries exactly one of these.
Allowed:
unauthorizedforbiddennot_foundinvalid_requestconflictclient_outdatedprecondition_failedtoo_many_requestsinternalmessagestringrequired403Caller lacks vault.read, or an API key's Kikuvi-Workspace header names another workspace.
errorErrorDetailrequiredWhat went wrong: a `code` to branch on and a `message` to show. The
message is written for a person and may change; the code will not.
Show propertiesHide properties
codeErrorCoderequiredThe machine-readable half of an error response, and the field a client
branches on. Closed: every error carries exactly one of these.
Allowed:
unauthorizedforbiddennot_foundinvalid_requestconflictclient_outdatedprecondition_failedtoo_many_requestsinternalmessagestringrequired404No such workspace, or the caller cannot see it.
errorErrorDetailrequiredWhat went wrong: a `code` to branch on and a `message` to show. The
message is written for a person and may change; the code will not.
Show propertiesHide properties
codeErrorCoderequiredThe machine-readable half of an error response, and the field a client
branches on. Closed: every error carries exactly one of these.
Allowed:
unauthorizedforbiddennot_foundinvalid_requestconflictclient_outdatedprecondition_failedtoo_many_requestsinternalmessagestringrequired