You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: src/pages/guides/authentication/ServerToServerAuthentication/implementation.md
+3-6Lines changed: 3 additions & 6 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -123,19 +123,18 @@ Follow the steps below to rotate client secrets programmatically for the OAuth S
123
123
```
124
124
125
125
5. Generate an access token using the existing client secret (see the section on [generating access tokens](#generate-access-tokens)). Make sure to include scopes that the I/O Management API requires:
6. Call the API to list all existing client secrets. Note: you can grab your `client_id` from the OAuth Server-to-Server credential overview page.
130
-
131
131
```curl
132
132
curl -X GET 'https://api.adobe.io/console/organizations/{orgId}/credentials/{credentialId}/secrets' \
133
133
-H 'Authorization: Bearer {ACCESS TOKEN GENERATED IN STEP 5}'
134
134
-H 'x-api-key: {CLIENT ID FROM STEP 6}'
135
135
```
136
136
137
137
7. Call the API to add another client secret to your credential. The API response contains the `client_secret` that was added and its `uuid`. This `client_secret` will never be returned in plain text by any other API response. However, you can still find it on the Developer Console UI.
138
-
139
138
```curl
140
139
curl -X POST 'https://api.adobe.io/console/organizations/{orgId}/credentials/{credentialId}/secrets' \
141
140
-H 'Authorization: Bearer {ACCESS TOKEN GENERATED IN STEP 5}'
@@ -147,8 +146,6 @@ Follow the steps below to rotate client secrets programmatically for the OAuth S
147
146
9. Call the API to list all client secrets for your credential. You can confirm that you have successfully updated the client secret in your applications by comparing the last used timestamps for the secrets. Grab the value of the `uuid` field for your older secret that you wish to delete.
148
147
149
148
10. Call the API to delete the old client secret from your credential by passing the `uuid` in the URL
150
-
151
-
152
149
```curl
153
150
curl -X DELETE 'https://api.adobe.io/console/organizations/{orgId}/credentials/{credentialId}/secrets/{uuid from step 9}' \
154
151
-H 'Authorization: Bearer {ACCESS TOKEN GENERATED IN STEP 5}'
0 commit comments