Account

OAuth Client Secret Reset

post
https://api.linode.com/v4/account/oauth-clients/{clientId}/reset-secret

Resets the OAuth Client secret for a client you own, and returns the OAuth Client with the plaintext secret. This secret is not supposed to be publicly known or disclosed anywhere. This can be used to generate a new secret in case the one you have has been leaked, or to get a new secret if you lost the original. The old secret is expired immediately, and logins to your client with the old secret will fail.

Path Parameters

clientId
Required
string

The OAuth Client ID to look up.

Request Samples

curl -H "Content-Type: application/json" \
    -H "Authorization: Bearer $TOKEN" \
    -X POST \
    https://api.linode.com/v4/account/oauth-clients/edc6790ea9db4d224c5c/reset-secret

Response Samples

{
  "status": "active",
  "id": 1234,
  "redirect_uri": "https://example.org/oauth/callback",
  "label": "Test_Client_1",
  "secret": "<REDACTED>",
  "thumbnail_url": "https://api.linode.com/v4/account/clients/2737bf16b39ab5d7b4a1/thumbnail",
  "public": ""
}

Responses

200: Client secret reset successfully.

status
string
Enum: "active""disabled""suspended"

The status of this application. active by default.

id
string

The OAuth Client ID. This is used to identify the client, and is a publicly-known value (it is not a secret).

redirect_uri
string <url>

The location a successful log in from https://login.linode.com should be redirected to for this client. The receiver of this redirect should be ready to accept an OAuth exchange code and finish the OAuth exchange.

label
Filterable
string [1 .. 512] characters

The name of this application. This will be presented to users when they are asked to grant it access to their Account.

secret
string

The OAuth Client secret, used in the OAuth exchange. This is returned as <REDACTED> except when an OAuth Client is created or its secret is reset. This is a secret, and should not be shared or disclosed publicly.

thumbnail_url
Nullable
string <url>

The URL where this client's thumbnail may be viewed, or null if this client does not have a thumbnail set.

public
Filterable
boolean

If this is a public or private OAuth Client. Public clients have a slightly different authentication workflow than private clients. See the OAuth spec for more details.

default: Error

errors
array of objects
reason
string

What happened to cause this error. In most cases, this can be fixed immediately by changing the data you sent in the request, but in some cases you will be instructed to open a Support Ticket or perform some other action before you can complete the request successfully.

field
string

The field in the request that caused this error. This may be a path, separated by periods in the case of nested fields. In some cases this may come back as "null" if the error is not specific to any single element of the request.