DELETE
/api/apps/{app_id}/client-secretAuthenticatedRemove a client secret
Removes the client secret of a client application, reverting it to a public client. Requires management access; hardcoded apps cannot be configured.
operationId
delete_api_apps_app_id_client_secretClient applicationsAuthentication & permissionsAuthenticated
Any authenticated user
- Accepted credentials
- Auth server session (refresh token cookie)
cookie "refresh_token_<auth_server_app_id>" - Access token (cookie)
cookie "access_token_<auth_server_app_id>" - Access token (Bearer)
Authorization: Bearer <JWT>
- Auth server session (refresh token cookie)
- Who may call
- Any authenticated user
Path parameters
| Name | Type | Description |
|---|---|---|
| app_id* | string | Client application id |
Responses
application/json
SuccessMessageResponse
| Property | Type | Description |
|---|---|---|
| success* | true | |
| message* | string |
JSONExample
"success"true
"message""string"
Example request
bashcurl
curl -X DELETE 'https://auth.schemavaults.com/api/apps/<app_id>/client-secret' \
-b 'refresh_token_<auth_server_app_id>=<value>'