On Mon, Jun 6, 2016 at 11:27 AM, Geesara Prathap <[email protected]> wrote:

> Yes, It should be. We should use the same endpoint in order to create and
> update  an OAuth application.
>

Well, its depends on your implementation and auth server. I believe it is
not necessary to  use same endpoint templates. Different vendors use
different ways to implement their DCR endpoints.  For example, consider
below endpoints for creating and update. This has been used in MIT auth
server's DCR implementation.[1]

For creating (POST)

http://localhost:8080/openid-connect-server-webapp/register

Payload

{
"application_type":"web",
       "redirect_uris": [
           "http://10.100.0.13:8080/simple-web-app/openid_connect_login";
       ],
       "client_name": "Simple Web App"
}

For the update (PUT).

http://localhost:8080/openid-connect-server-webapp/register/4547fc03-a6f3-4641-8e1f-84eb13093e5c

{

client_name: "Changed App",
client_id: "4547fc03-a6f3-4641-8e1f-84eb13093e5c",
"redirect_uris": [
   "http://10.100.0.13:8080/simple-web-app/openid_connect_login";
]}

[1] https://github.com/mitreid-connect/OpenID-Connect-Java-Spring-Server

@maneesha,

is it possible to share two payloads that you have used in create and
update endpoints?


Regards
Roshan

-- 
Roshan Wijesena.
Senior Software Engineer-WSO2 Inc.
Mobile: *+94719154640*
Email: [email protected]
*WSO2, Inc. :** wso2.com <http://wso2.com/>*
lean.enterprise.middleware.
_______________________________________________
Architecture mailing list
[email protected]
https://mail.wso2.org/cgi-bin/mailman/listinfo/architecture

Reply via email to