Skip to content
Authrim

Update FAPI and security settings

PUT
/api/admin/settings/fapi-security
Code sample: Shell / cURL 
curl --request PUT \
  --url https://auth.example.com/api/admin/settings/fapi-security \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{ "fapi": { "enabled": true, "strictDPoP": true, "allowPublicClients": false }, "oidc": { "supportedAcrValues": [ "urn:mace:incommon:iap:silver" ] } }'

Updates SETTINGS KV overrides for FAPI mode, strict DPoP, public client allowance, and supported ACR values.

Authorizations

Section titled “Authorizations ”

Request Body required

Section titled “Request Body required ”
Media type application/json
object
fapi
object
enabled
boolean
strictDPoP
boolean
allowPublicClients
boolean
key
additional properties
oidc
object
supportedAcrValues
Array<string>
>= 1 items
key
additional properties
key
additional properties
Example 
{
  "fapi": {
    "enabled": true,
    "strictDPoP": true,
    "allowPublicClients": false
  },
  "oidc": {
    "supportedAcrValues": [
      "urn:mace:incommon:iap:silver"
    ]
  }
}

Responses

Section titled “ Responses ”

200

Section titled “200 ”

FAPI and security settings mutation result.

Media type application/json
object
success
boolean
settings

Resolved FAPI and OIDC security settings.

object
key
additional properties
sources

Setting sources.

object
key
additional properties
note
string
key
additional properties
Example 
{
  "success": true,
  "settings": {
    "fapi": {
      "enabled": true,
      "strictDPoP": true,
      "allowPublicClients": false
    },
    "oidc": {
      "supportedAcrValues": [
        "urn:mace:incommon:iap:silver"
      ]
    }
  },
  "sources": {
    "fapi": {
      "enabled": "kv",
      "strictDPoP": "kv",
      "allowPublicClients": "kv"
    },
    "oidc": {
      "supportedAcrValues": "kv"
    }
  },
  "note": "FAPI/Security settings updated successfully."
}

400

Section titled “400 ”

Error response.

Media type application/json
object
error
string
message
string
error_description
string
key
additional properties
Example generated
{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

401

Section titled “401 ”

Error response.

Media type application/json
object
error
string
message
string
error_description
string
key
additional properties
Example generated
{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

403

Section titled “403 ”

Error response.

Media type application/json
object
error
string
message
string
error_description
string
key
additional properties
Example generated
{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

500

Section titled “500 ”

Error response.

Media type application/json
object
error
string
message
string
error_description
string
key
additional properties
Example generated
{
  "error": "example",
  "message": "example",
  "error_description": "example"
}