OIDC dynamic client registration

POST 
/api/oidc/:OIDCAppName/register

Registers a new OAuth 2.0/OIDC client dynamically per RFC 7591 (OAuth 2.0 Dynamic Client Registration Protocol). The client submits desired metadata (redirect_uris, client_name, grant_types, etc.) and receives the registered client metadata including the assigned client_id and client_secret. This feature must be explicitly enabled on the OIDC application configuration.

Request

Responses

200

OK: Returns the registered client metadata.

400

Status Bad Request: Invalid registration request.

403

Status Forbidden: Dynamic client registration is not enabled.

429

Too Many Requests: The client has sent too many requests in a given amount of time.

Response Headers

X-RateLimit-Limit
Refill rate of the bucket that rejected this request: requests per second for the tenant bucket, or requests per refill window (60 seconds by default) for the per-IP bucket.
Example: 100
X-RateLimit-Remaining
Tokens left in that bucket.
Example: 0
X-RateLimit-Reset
Unix timestamp, in seconds, at which the next token becomes available. This is the earliest time a retry can succeed.
Example: 1757942400