Credential Rotation Guide
To rotate your credentials before they expire, follow the steps below. You control the naming and expiration settings for any new credentials you create.
- Generate New Credentials
- Use the
POST /api/v0/client-credentials
(Details Here) endpoint to create a new set of credentials. The response will include both aclientId
and aclientSecret
.IMPORTANT The
clientSecret
is only returned once. Be sure to store it securely.
- Use the
- Use the New Credentials
- Use the newly generated
clientId
andclientSecret
to obtain access tokens via the/api/v0/oauth/token
(Details Here) endpoint.We recommend running your new credentials in parallel with your existing ones and monitoring functionality to ensure a smooth transition
- Use the newly generated
- Retire the Old Credentials
- Once you're confident the new credentials are working correctly, you may delete the old, expiring credentials using the
DELETE /api/v0/client-credentials/{clientId}
(Details Here) endpoint.
- Once you're confident the new credentials are working correctly, you may delete the old, expiring credentials using the
Updated 6 days ago