Patch client-scoped settings.

PATCH

/api/admin/clients/{clientId}/settings

Code sample: Shell / cURL

curl --request PATCH \
  --url https://auth.example.com/api/admin/clients/example/settings \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{ "ifMatch": "v1", "changes": { "oauth.require_pkce": true } }'

Update Setting in the Clients area. The request body is JSON unless the detailed schema for this operation states otherwise.

Authorizations

• adminBearer
• adminSessionCookie

Parameters

Path Parameters

clientId

required

string

Header Parameters

X-Tenant-Id

string

Tenant selector for multi-tenant admin requests.

Request Body ^required

Media type application/json

object

ifMatch

required

Expected settings version for optimistic concurrency.

string

changes

object

key

additional properties

clear

Array<string>

disable

Array<string>

key

additional properties

Example

{
  "ifMatch": "v1",
  "changes": {
    "oauth.require_pkce": true
  }
}

Responses

200

Settings v2 patch response.

Media type application/json

Settings v2 patch result. Includes applied, cleared, disabled, rejected, and version metadata from the settings manager.

object

key

additional properties

Example

{
  "applied": [
    "oauth.require_pkce"
  ],
  "cleared": [],
  "disabled": [],
  "rejected": {},
  "version": "v2"
}