app.oauth_apps
TableRow level security on
OAuth 2.1 clients an org registers for user-delegated access to the public API (Section 10.1). Public clients using PKCE: no client secret exists. Scopes map one to one to capability groups.
Primary key: id
| Column | Type | Nullable | Description |
|---|---|---|---|
| id | uuid | No | Primary key, UUID v7. |
| org_id | uuid | No | Org that registered the app and whose data it may reach.References app.organizations.id |
| name | text | No | App name shown on the consent screen. |
| client_id | text | No | OAuth client identifier, issued by the database and never changed. |
| redirect_uri | text | No | Registered redirect URI: HTTPS, or a loopback address for native apps; no fragment. |
| deleted_at | timestamp with time zone | Yes | Soft delete time. A row with deleted_at set is ignored by every access helper. |
| created_at | timestamp with time zone | No | When the row was inserted. Set by the database. |
| created_by | uuid | Yes | Person who inserted the row, or null for a platform process. Set by the database.References app.people.id |
| updated_at | timestamp with time zone | No | When the row last changed. Set by the database. |
| updated_by | uuid | Yes | Person who last changed the row, or null for a platform process. Set by the database.References app.people.id |