Skip to main content
POST
Register a third-party app

Authorizations

pid_access
string
cookie
required

JWT access token set by /auth/google/callback or /auth/refresh

Body

application/json
name
string
required
Maximum string length: 60
allowedOrigins
string[]

Bare http(s) origins (no paths). Optional — managed after registration too.

Maximum array length: 20

Response

The registered app including its client_id

id
string<uuid>
required
clientId
string
required

Public app id to pass as clientId in login/exchange calls

Example:

"pidapp_0123456789abcdef0123456789abcdef"

ownerId
string
required
name
string
required
allowedOrigins
string[]
required

Managed list of bare origins — login redirects and CORS

isActive
boolean
required
createdAt
string<date-time>
required
updatedAt
string<date-time>
required
clientSecretPrefix
string | null

Identifying prefix of the current backend secret (the secret itself is never returned)

clientSecretCreatedAt
string<date-time> | null