OAuthApplicationCreated

Returned only at creation time and from the rotate-secret endpoint. `clientSecret` is shown once; subsequent reads return the application row without it.

Definition

TypeScript

interface OAuthApplicationCreated {
  application: {
    clientId: string;
    name: string;
    type: "public" | "web" | "native" | "user-agent-based";
    redirectUrls: Array<string>;
    ownerOrgId: string;
    allowedScopes: Array<"workspace:read" | "workspace:write">;
    isFirstParty: boolean;
    disabled: boolean;
    createdAt: string;
    updatedAt: string;
  };
  clientSecret: string | null;
}

Fields

Field	Type	Notes
`application`	`{ clientId: string; name: string; type: "public" \| "web" \| "native" \| "user-agent-based"; redirectUrls: Array<string>; ownerOrgId: string; allowedScopes: Array<"workspace:read" \| "workspace:write">; isFirstParty: boolean; disabled: boolean; createdAt: string; updatedAt: string; }`	`required`
`clientSecret`	`string \| null`	`required` — Plaintext client secret — null for PKCE-only public clients. Shown ONCE at creation; cannot be retrieved later. Use the rotate endpoint to issue a new secret.