Magidoc

OAuth2ClientAccess
Object

Access configuration of a client: describes how an access token can be obtained.

Fields

#

consentRequired

Boolean

Whether to display a consent page to a user after authentication, when a public client attempts to obtain an access token on his behalf. Consent page contains a list of OAuth2 scopes requested by a client. Applicable only for clients with authorizationCode flow enabled.

flows

[ OAuth2ClientFlow ]!
Non-null

List of OAuth2 flows (also authorization grants) supported by this client. See https://datatracker.ietf.org/doc/html/rfc6749#autoid-4

homeUrl

String

Default URL to use when an identity server needs to redirect or link back to the client. Applicable only for clients with authorizationCode flow enabled.

redirectUris

[ String ]

Valid URI patterns a browser can redirect to after a successful login or logout. Applicable only for clients with authorizationCode flow enabled.

type

OAuth2ClientType !
Non-null

Type of a client: defines how client initiates a login flow.

webOrigins

[ String ]

Allowed CORS origins. Applicable only for clients with authorizationCode flow enabled.

Usages

#

References

#