PUT `/oauth/register/{client_id}`

OAuth 2.0 dynamic client registration update endpoint. Uses Registration Access Token to update client metadata (redirect_uris, grant_types, scope, JWKS, etc.). Reference: RFC 7591 §2.2 (Client Update Request).

OAuth None application/json

Request Parameters

Name	In	Type	Required	Default	Example	Constraints	Description
`client_id`	`path`	`string`	Yes				Client ID
`Authorization`	`header`	`string`	Yes				Bearer <registration_access_token>

Request Body

Schema: dto.ClientRegistrationUpdateRequest

Field	Type	Required
`application_type`	`string`	No
`client_name`	`string`	No
`client_uri`	`string`	No
`contacts`	array of string	No
`grant_types`	array of string	No
`jwks`	`string`	No
`jwks_uri`	`string`	No
`logo_uri`	`string`	No
`policy_uri`	`string`	No
`redirect_uris`	array of string	No
`scope`	`string`	No
`software_id`	`string`	No
`software_version`	`string`	No
`token_endpoint_auth_method`	`string`	No
`tos_uri`	`string`	No

Responses

Status	Description	Schema
200	Updated client metadata	`dto.ClientRegistrationDetailResponse`
400	invalid_client_metadata: request metadata invalid	`dto.OAuthErrorResponse`
401	invalid_token: missing or invalid Registration Access Token. Reference: RFC 7591 §2.3.	`dto.OAuthErrorResponse`
500	server_error: failed to update client registration	`dto.OAuthErrorResponse`

Referenced Schemas

dto.ClientRegistrationDetailResponse

Field	Type	Required
`code`	`integer`	No
`data`	`dto.ClientRegistrationResponse`	No
`message`	`string`	No
`timestamp`	`string`	No

dto.ClientRegistrationResponse

OAuth 2.0 Dynamic Client Registration response (RFC 7591 §2.1)

Field	Type	Required	Example	Description
`application_type`	`string`	No	`web`	Application type
`client_id`	`string`	No	`01JNXXXXX...`	Client ID
`client_id_issued_at`	`integer`	No	`1715692800`	Client ID issued at
`client_name`	`string`	No	`My Application`	Client name
`client_secret`	`string`	No	`sec_abc123...`	Client secret
`client_secret_expires_at`	`integer`	No	`0`	Client secret expiration time (0 = never expires)
`client_uri`	`string`	No	`https://app.example.com`	Client home page URL
`contacts`	array of string	No	`['["admin@example.com"]']`	Contacts
`grant_types`	array of string	No	`['["authorization_code"', '"refresh_token"]']`	Grant types
`logo_uri`	`string`	No	`https://app.example.com/logo.png`	Logo URL
`policy_uri`	`string`	No	`https://app.example.com/privacy`	Privacy policy URL
`redirect_uris`	array of string	No	`['["https://app.example.com/callback"]']`	Redirect URIs
`registration_access_token`	`string`	No	`reg_abc123...`	Registration access token
`registration_client_uri`	`string`	No	`https://authms.example.com/api/v1/oauth/register/app-123`	Registration management URI
`scope`	`string`	No	`openid profile email`	Scopes
`token_endpoint_auth_method`	`string`	No	`client_secret_basic`	Authentication method
`tos_uri`	`string`	No	`https://app.example.com/tos`	Terms of service URL

dto.OAuthErrorResponse

OAuth standard error response

Field	Type	Required	Example	Description
`error`	`string`	No	`invalid_request`	Error code
`error_description`	`string`	No	`Missing required parameter`	Error description
`error_uri`	`string`	No	`https://docs.example.com/errors`	Error URI
`state`	`string`	No	`state-123`	Status

Try this API in Scalar → Download OpenAPI spec (JSON) ↓

PUT /oauth/register/{client_id}