Rotate an OAuth client secret

Replaces the client secret of an active application and returns the new secret. The previous secret stops working. Send an Idempotency-Key header. A retry with the same key returns the same secret.

POST/api/v2/developer/apps/{appId}/client-secret/rotate

Parameters #

PropertyTypeLocationDescription
appIdstringRequiredpath-
Idempotency-KeystringRequiredheader-

Request #

curl --request POST 'https://strave.gg/api/v2/developer/apps/APP_ID/client-secret/rotate' \
  --header 'Authorization: Bearer $STRAVE_ACCESS_TOKEN'

Response #

200Response for status 200
application/json
400Response for status 400
application/json
401Response for status 401
application/json
403Response for status 403
application/json
404Response for status 404
application/json
409Response for status 409
application/json
412Response for status 412
application/json
428Response for status 428
application/json
429Response for status 429
application/json
500Response for status 500
application/json
503Response for status 503
application/json
PropertyTypeDescription
dataobjectRequired-
└applicationobjectRequired-
└idstringRequired-
└ownerobjectRequired-
└typestringRequired-
└idstringRequired-
└clientIdstringRequired-
└kindstringRequired-
└namestringRequired-
└descriptionstring | nullRequired-
└homepageUrlstring<uri> | nullRequired-
└iconUrlstring<uri> | nullRequired-
└statusstringRequired-
└revisionintegerRequired-
└createdAtstringRequired-
└updatedAtstringRequired-
└clientSecretstringRequired-