Add OAuth-Client
- Name - the Name of your Client
- Allow implicit Grant type - should only enabled for JavaScript applications
- Allow Password Grant type - should only enabled for own applications, if the login with username and password is really required (e.g. at mobile application)
- Enforce PKCE - if enabled, the client must use Proof Key for Code Exchange (PKCE). This should be enabled, if it is a public client.
- Redirect-URLs - insert valid Redirect-URLs of your application, where the user should be returned
- Permissions - you can set permissions for user and usergroups, which are allowed to login with this Client
Edit OAuth-Client
When edit an OAuth-Client, you will get the following additional information:
- Authorization-URL - Copy it into your application
- Token-Endpoint - Copy it into your application
- User-API Endpoint - Copy it into your application
- Client-ID - Copy it into your application
- Client-Secret - Copy it into your application, but it should be kept secret
