POST /v1/organizations/{organizationId}/oauth/clients/{clientId}/secret/rotate
Mints a new secret, then retires the one it replaces: normal keeps the old one working for one hour, emergency stops it now. A secret not created through Photon always stops now. Rotating again ends an earlier grace period. Retain the same UUID Idempotency-Key when retrying: only the delivering request returns plaintext.
- TypeScript
- Python
- Rust
- Go
TypeScript
Parameters
string
required
string
required
string (uuid)
required
Body
RotateOrganizationOauthClientSecretRequestMode
required
Returns
200 Secret rotated. previousSecretValidUntil is when the old one stops working, null once it has. RotateOrganizationOauthClientSecretResponse
string (date-time) | null
required
string | null
required