Appearance
identity.app.configure-client ​
Configure an app's OIDC client (safe-by-default validation)
Configure an app's OIDC client (callback URLs, token TTLs, policy) safely.
Inputs:
- actor: Cognito sub or user UUID (required)
- organization_uuid: owning organization (required)
- client_uuid: the OIDC client to configure (required)
- redirect_uris: list of absolute https (or localhost) callback URLs (required)
- recovery_uris: optional list of exact URIs that may receive a verify/reset email token. Empty/omitted = hosted login.orkestia.dev only.
- token_ttls: optional
- policy: optional policy object
Outputs (terminal state_data):
- client_uuid, redirect_uris, updated_at
Overview ​
| Property | Value |
|---|---|
| Workflow type | Linear |
| Library | App-identity |
| Version | 1.0 |
Input Schema ​
| Field | Type | Required | Default | Description |
|---|---|---|---|---|
actor | string | Yes | — | — |
organization_uuid | uuid | Yes | — | — |
client_uuid | uuid | Yes | — | — |
redirect_uris | list | Yes | — | — |
recovery_uris | list | No | — | — |
token_ttls | dict | No | — | — |
policy | dict | No | — | — |
Output Schema ​
| Field | Type | Required | Default | Description |
|---|---|---|---|---|
client_uuid | uuid | Yes | — | — |
redirect_uris | list | Yes | — | — |
recovery_uris | list | No | — | — |
updated_at | string | Yes | — | — |
actor | string | No | — | — |
failure_reason | string | No | — | — |
failure_type | string | No | — | — |
failed_action | string | No | — | — |
failed_at_state | string | No | — | — |
States ​
| State | Initial | Terminal | Success | Auto-advance | Description |
|---|---|---|---|---|---|
initiated | Yes | No | — | validate | — |
persisting | No | No | — | complete | — |
validating | No | No | — | persist | — |
completed | No | Yes | Yes | — | — |
failed | No | Yes | No | — | — |
State Diagram ​
Transitions ​
| From | Action | To | Description |
|---|---|---|---|
initiated | validate | validating | — |
validating | persist | persisting | — |
persisting | complete | completed | — |
* (any state) | fail | failed | — |
API Usage ​
bash
POST /api/workflows/start
Content-Type: application/json
{
"workflow_type": "identity.app.configure-client",
"initial_data": {
"actor": "value",
"organization_uuid": "value",
"client_uuid": "value",
"redirect_uris": "value"
}
}