Skip to main content
POST
/
oauth-providers
/
{provider_id}
/
client-types
Create a new client type of an OAuth2.0 Identity Provider
curl --request POST \
  --url http://localhost:3001/portal-api/oauth-providers/{provider_id}/client-types \
  --header 'Authorization: <api-key>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "Name": "<string>",
  "ResponseTypes": "code",
  "GrantType": "authorization_code",
  "Description": "<string>",
  "TokenEndpointAuthMethod": "client_secret_basic",
  "OktaAppType": "web"
}
'
{
  "Name": "<string>",
  "ResponseTypes": "code",
  "GrantType": "authorization_code",
  "Description": "<string>",
  "TokenEndpointAuthMethod": "client_secret_basic",
  "OktaAppType": "web",
  "ID": 123,
  "CreatedAt": "<string>",
  "UpdatedAt": "<string>"
}

Authorizations

​
Authorization
string
header
required

Path Parameters

​
provider_id
integer
required

UID of this OAuth2.0 provider

Example:

1

Body

application/json
​
Name
string
required

Name of this Client type

​
ResponseTypes
enum<string>
required

The OAuth 2.0 response type(s) the client is permitted to use, determining how it receives authorization responses from the Identity Provider. Format as CSV and Specify at least one.

Available options:
code,
token,
it_token,
none
​
GrantType
enum<string>
required

The OAuth 2.0 grant types the client is permitted to use, determining how it obtains access tokens from the authorization server. Format as CSV and Specify at least one.

Available options:
authorization_code,
pkce,
client_credentials,
device_code,
refresh_token,
password,
implicit
​
Description
string

Description of this Client type

​
TokenEndpointAuthMethod
enum<string>

The authentication method a client can use at the token endpoint, ensuring secure communication with the authorization server during the OAuth 2.0 authentication.

Available options:
client_secret_basic,
client_secret_post
​
OktaAppType
enum<string>

Dictates how an application will authenticate and interact with Okta's authorization servers, including whether it operates as a web, native, single-page, or service application. This setting is required to register Okta Identity Providers and not required for other Identity Provider. Please note that Okta overwrites values of the TokenEndpointAuthMethod, GrantType, and ResponseTypes properties and fills them based on the value of the OktaAppType property.

Available options:
web,
native,
browser,
service

Response

OK

​
Name
string
required

Name of this Client type

​
ResponseTypes
enum<string>
required

The OAuth 2.0 response type(s) the client is permitted to use, determining how it receives authorization responses from the Identity Provider. Format as CSV and Specify at least one.

Available options:
code,
token,
it_token,
none
​
GrantType
enum<string>
required

The OAuth 2.0 grant types the client is permitted to use, determining how it obtains access tokens from the authorization server. Format as CSV and Specify at least one.

Available options:
authorization_code,
pkce,
client_credentials,
device_code,
refresh_token,
password,
implicit
​
Description
string

Description of this Client type

​
TokenEndpointAuthMethod
enum<string>

The authentication method a client can use at the token endpoint, ensuring secure communication with the authorization server during the OAuth 2.0 authentication.

Available options:
client_secret_basic,
client_secret_post
​
OktaAppType
enum<string>

Dictates how an application will authenticate and interact with Okta's authorization servers, including whether it operates as a web, native, single-page, or service application. This setting is required to register Okta Identity Providers and not required for other Identity Provider. Please note that Okta overwrites values of the TokenEndpointAuthMethod, GrantType, and ResponseTypes properties and fills them based on the value of the OktaAppType property.

Available options:
web,
native,
browser,
service
​
ID
integer

UID of this client type

​
CreatedAt
string

Timestamp of when this client type was created

​
UpdatedAt
string

Timestamp of when this client type was created