oauth_clients

{“what”:“Unique client identifier string, e.g., UUID or generated value.”,“why”:“Without it, clients cannot be referenced in authorization requests or token issuance.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:59:53.515606925+00:00”}

{“what”:“Hashed client secret for confidential clients; null for public clients.”,“why”:“Without it, confidential clients cannot prove their identity during token requests.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:59:53.556978796+00:00”}

{“what”:“Human-readable client name shown on consent screens.”,“why”:“Without it, users cannot identify which application requests access.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:59:53.602960955+00:00”}

{“what”:“Allowed redirect URIs for authorization code flow.”,“why”:“Without it, authorization responses cannot be safely sent to the client.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:59:53.719222839+00:00”}

{“what”:“Allowed post-logout redirect URIs for end-session flow.”,“why”:“Without it, logout redirects would be unrestricted or impossible.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:59:53.782676171+00:00”}

{“what”:“Scopes the client is permitted to request, e.g., openid, profile.”,“why”:“Without it, clients could request any scope, risking over-privileged tokens.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:59:53.795760868+00:00”}

{“what”:“OAuth grant types the client may use, e.g., authorization_code, refresh_token.”,“why”:“Without it, clients could use unintended flows, weakening security.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:59:53.896463088+00:00”}

{“what”:“True if client is owned by the same organization.”,“why”:“Without it, first-party clients cannot be given elevated trust or different UX.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:59:53.908895678+00:00”}

{“what”:“True if client cannot keep a secret, e.g., SPA or mobile app.”,“why”:“Without it, token endpoint cannot enforce appropriate client authentication.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:59:54.717569382+00:00”}

{“what”:“True if ID token should include user’s role claim.”,“why”:“Without it, role information may be missing from tokens for this client.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:59:54.798438218+00:00”}

{“what”:“True if client is deactivated and cannot authenticate.”,“why”:“Without it, compromised or deprecated clients cannot be revoked.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:59:54.864494227+00:00”}

{“what”:“Timestamp when client record was created, in UTC.”,“why”:“Without it, audit and lifecycle decisions lose temporal context.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-22T23:59:54.893420106+00:00”}