POST `/admin/oauth/clients/{client_id}/rotate-secret`

Generates a new secret for a specified client; the old secret is immediately invalidated (moved to history table, still verifiable for 4 hours).

OAuth Client Management `bearerAuth` application/json

Request Parameters

Name	In	Type	Required	Default	Example	Constraints	Description
`client_id`	`path`	`string`	Yes				Client ID

Status	Description	Schema
200	New secret (includes new_secret, returned once)	`dto.RotateSecretDetailResponse`
400	Invalid request parameters	`gitee_com_linmes_authms_base_dto.SimpleResponse`
401	Unauthenticated: provide a valid Bearer Token	`gitee_com_linmes_authms_base_dto.SimpleResponse`
403	Insufficient permissions: administrator role required	`gitee_com_linmes_authms_base_dto.SimpleResponse`
404	Client not found or does not belong to the current tenant	`gitee_com_linmes_authms_base_dto.SimpleResponse`
500	Internal server error	`gitee_com_linmes_authms_base_dto.SimpleResponse`

Field	Type	Required
`code`	`integer`	No
`data`	`dto.RotateSecretResponse`	No
`message`	`string`	No
`timestamp`	`string`	No

Field	Type	Required
`client_id`	`string`	No
`new_secret`	`string`	No
`rotated_at`	`string`	No

Field	Type	Required
`code`	`integer`	No
`message`	`string`	No
`timestamp`	`string`	No