Provider
An OAuth app people sign in with: who holds it, where it came from, and the service's app. Never its client secret.
Properties
Section titled “Properties”| Property | Type | Description |
|---|---|---|
owner |
string |
- |
name |
string |
The account it grants. |
source |
Source |
- |
issuer? |
string |
The authorization server's issuer URL. Its metadata provides the endpoints. |
resource? |
string |
The API or MCP server that the tokens are for. If you don't set issuer, Wardrik finds it from this URL. |
authorization_endpoint? |
string |
The URL where people sign in, for a service that doesn't publish metadata. Set together with token_endpoint. |
token_endpoint? |
string |
The token endpoint. Set together with authorization_endpoint. |
client_id? |
string |
The OAuth app's client ID. If you leave it empty, Wardrik registers itself as a client, if the service allows it. |
client_secret? |
object |
The vault secret holding the app's client secret. Omitted for an app without one, and for one in config.yaml. |
client_secret.name |
string |
The name of the secret in the owner's vault. |
client_auth |
"post" | "basic" |
How the client secret is sent: in the form, or as HTTP Basic. |
scopes |
string[] |
The scopes to ask for. |
flow |
"browser" | "device" |
How a person signs in: in a browser, or with a code on another device. |
authorization_params? |
object |
Extra parameters for the browser sign-in, for example access_type: offline. You can't override the parameters Wardrik sets. |