Apps other people use with The Collector (OAuth 2.1, ENGIN-52): register them, with their redirect URIs and the scopes they may ask for, and rotate a confidential app’s secret. Managed with a signed-in session, never with a key or token.
/admin/oauth-appsAdminBetaAdmin → OAuth apps: apps waiting for review (oldest first), or every app. Signed-in admins only: no key can review apps.
/admin/oauth-apps/{appId}/reviewAdminBetaApproving makes the scopes the app has now work for every collector; a write or store scope added later needs another review. Rejecting needs a note for the developer.
/admin/oauth-apps/{appId}/suspensionAdminBetaA suspended app can’t be authorized, and every token it holds stops working at once. Restoring it brings its connections back.
/oauth/appsSigned inBetaThe OAuth apps you’ve registered, newest first, without their client secrets.
/oauth/appsSigned inBetaA new app and its client id. A confidential app’s client secret is in this answer only. Apps asking for write or store scopes work for you alone until an admin approves them.
/oauth/apps/{appId}Signed inBetaThe app, its review and how many collectors are connected to it.
/oauth/apps/{appId}Signed inBetaDeletes the app with every authorization collectors gave it: their tokens stop working at once. It can’t be undone.
/oauth/apps/{appId}Signed inBetaIts name, description, addresses, logo, redirect URIs or scopes. New redirect URIs apply at once. A write or store scope added after a review works for others only once it’s approved too.
/oauth/apps/{appId}/reviewSigned inBetaAsks an admin to approve the app’s write and store scopes, so collectors other than you can authorize them. Read scopes need no review.
/oauth/apps/{appId}/secretSigned inBetaA new client secret, shown in this answer only. The old one stops at once, or after 24 hours with graceHours: 24.