Skip to content

OAuth clients

Admin → Settings → OAuth clients registers applications that sign in to Lurana BPM with OAuth, so an integration does not need a user's password.

The list

The page is titled OAuth applications and shows:

Column Content
ID The client identifier
Name The application name
Plugin The plugin that publishes the scopes the client uses
State Pending, active, revoked, or rejected
Redirect URI Where the authorization response is sent

Filter by state: all, pending, active, revoked, and rejected.

Register an application

  1. Choose New application.
  2. Enter the name, choose the plugin, and set the redirect URI.
  3. Changing the plugin reloads the available scopes: each plugin publishes its own.
  4. Select at least one scope. Saving with none is refused and the error appears in the form.

Approve or reject

A new client starts in Pending state. Open it and choose Approve or Reject. Regenerate secret and Revoke appear once the client is no longer pending.

The secret is shown once

After saving, the dialog shows the client secret with a Copy button and the notice Copy this value now. It will not be shown again.

Reopening the client later does not show the secret again. If it is lost, regenerate it:

  • Regenerate secret asks for confirmation (Regenerating invalidates the previous one) and shows the new value once.
  • Revoke asks for confirmation and moves the client to Revoked in the list.

Names can differ between menu and page

The menu says OAuth clients; the page heading says OAuth applications; the field is secret here and secreto in the Spanish interface. They refer to the same object, and a mismatch is a translation defect worth reporting rather than a second feature.

Permissions

This page requires PM_SETUP_USERS_AUTHENTICATION_SOURCES inside the Settings section, which requires PM_SETUP. A user without these permissions does not see the menu entry. See Permission reference.