Skip to content

Conversation

@cemalkilic
Copy link
Contributor

Summary

Adds a new admin endpoint to update existing OAuth client configurations. This enables administrators to modify OAuth client settings without having to delete and recreate clients.

Changes

New Endpoint

  • PUT /admin/oauth/clients/{client_id} - Update OAuth client configuration (admin only)

Supported Update Fields

  • redirect_uris - Array of redirect URIs
  • grant_types - Array of grant types (authorization_code, refresh_token)
  • client_name - Human-readable client name
  • client_uri - Client application homepage URL
  • logo_uri - Client application logo URL

Example Usage

# Update client redirect URIs and name
curl -X PUT https://your-project.supabase.co/admin/oauth/clients/{client_id} \
  -H "Authorization: Bearer {admin-token}" \
  -H "Content-Type: application/json" \
  -d '{
    "client_name": "Updated App Name",
    "redirect_uris": ["https://app.example.com/callback"]
  }'

@coveralls
Copy link

coveralls commented Oct 29, 2025

Pull Request Test Coverage Report for Build 18932046775

Warning: This coverage report may be inaccurate.

This pull request's base commit is no longer the HEAD commit of its target branch. This means it includes changes from outside the original pull request, including, potentially, unrelated coverage changes.

Details

  • 120 of 143 (83.92%) changed or added relevant lines in 3 files are covered.
  • No unchanged relevant lines lost coverage.
  • Overall coverage increased (+0.09%) to 68.101%

Changes Missing Coverage Covered Lines Changed/Added Lines %
internal/api/oauthserver/handlers.go 16 19 84.21%
internal/api/oauthserver/service.go 103 123 83.74%
Totals Coverage Status
Change from base Build 18910658377: 0.09%
Covered Lines: 13883
Relevant Lines: 20386

💛 - Coveralls

@cemalkilic cemalkilic enabled auto-merge (squash) October 30, 2025 06:32
@cemalkilic cemalkilic merged commit 6296a5a into master Oct 30, 2025
4 of 5 checks passed
@cemalkilic cemalkilic deleted the cemal/feat-add-oauth-client-update-endpoint branch October 30, 2025 06:32
issuedat pushed a commit that referenced this pull request Nov 4, 2025
🤖 I have created a release *beep* *boop*
---


##
[2.181.0](v2.180.0...v2.181.0)
(2025-10-31)


### Features

* add `.well-known/openid-configuration`
([#2197](#2197))
([9a8d0df](9a8d0df))
* add `auth_migration` annotation for the migrations
([#2234](#2234))
([b276d0b](b276d0b))
* add advisor to notify you when to double the max connection pool
([#2167](#2167))
([a72f5d9](a72f5d9))
* add after-user-created hook
([#2169](#2169))
([bd80df8](bd80df8))
* add support for account changes notifications in email send hook
([#2192](#2192))
([6b382ae](6b382ae))
* email address changed notification
([#2181](#2181))
([047f851](047f851))
* identity linked/unlinked notifications
([#2185](#2185))
([7d46936](7d46936))
* introduce v2 refresh token algorithm
([#2216](#2216))
([dea5b8e](dea5b8e))
* MFA factor enrollment notifications
([#2183](#2183))
([53db712](53db712))
* notify users when their phone number has changed
([#2184](#2184))
([21f3070](21f3070))
* **oauthserver:** add OAuth client admin update endpoint
([#2231](#2231))
([6296a5a](6296a5a))
* properly handle redirect url fragments and unusual hostnames
([#2200](#2200))
([aa0ac5b](aa0ac5b))
* store latest challenge/attestation data
([#2179](#2179))
([01ebce1](01ebce1))
* support percentage based db limits with reload support
([#2177](#2177))
([1731466](1731466))
* webauthn support schema changes, update openapi.yaml
([#2163](#2163))
([68cb8d2](68cb8d2))


### Bug Fixes

* gosec incorrectly warns about accessing signature[64]
([#2222](#2222))
([bca6626](bca6626))
* **openapi:** add missing OAuth client registration fields
([#2227](#2227))
([cf39a8a](cf39a8a))

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants