post
https://production-api.shoutaboutus.com/api/v1/sso/create/client
Create a Passport authorization-code grant OAuth client (name + redirect URLs) owned by the authenticated user. This app acts as an OAuth Identity Provider. The plaintext client_secret comes back once, on creation only — it is hashed at rest (Passport v13) and can never be retrieved later. Emits audit OAUTH_CLIENT_CREATED.
Auth
- bearer token. The route file groups SSO client management under admin/super-admin, but the controller enforces owner-scoping: the creating user owns the client and only its creator may view / update / delete it.
Rate limit
- No rate limit.
Body
| Field | Type | Required | Notes |
|---|---|---|---|
name | string | Required | Human-readable client name. |
redirect_callback | array<string> | Required | One or more redirect URLs; each must be a valid http/https URL. |
Behaviour
- 200 with
client_id, one-timeclient_secret, and the echoedredirect_callback. 422 on validation failure; 500 on unexpected error.
Recent Requests
Log in to see full request history
| Time | Status | User Agent | |
|---|---|---|---|
Retrieving recent requests… | |||
Loading…