Rotate OAuth client secret

Rotate

Select an application in Applications, open Credentials and choose secret rotation for its Confidential OAuth client. Confirm, save the newly displayed secret to secure backend configuration and update callers.

Public clients have no secret. Rotation affects old credentials without a guaranteed fixed overlap window; plan the configuration switch and check existing sessions against the actual client/token contract. Keep both secrets out of frontend code and logs.

See client creation and OAuth.