Method patchOAuth2Client

client/handler.go:435–471

swagger:route PATCH /admin/clients/{id} oAuth2 patchOAuth2Client # Patch OAuth 2.0 Client Patch an existing OAuth 2.0 Client using JSON Patch. If you pass `client_secret` the secret will be updated and returned via the API. This is the only time you will be able to retrieve the client secret, so w

(w http.ResponseWriter, r *http.Request)

//	Extensions:
//	  x-ory-ratelimit-bucket: hydra-admin-high
func (h *Handler) patchOAuth2Client(w http.ResponseWriter, r *http.Request) {
	patchJSON, err := io.ReadAll(r.Body)
	if err != nil {
		h.r.Writer().WriteError(w, r, err)
		return
	}

	id := r.PathValue("id")
	client, err := h.r.ClientManager().GetConcreteClient(r.Context(), id)
	if err != nil {
		h.r.Writer().WriteError(w, r, err)
		return
	}

	oldSecret := client.Secret

	client, err = jsonx.ApplyJSONPatch(patchJSON, client, "/id")
	if err != nil {
		h.r.Writer().WriteError(w, r, err)
		return
	}

	// fix for #2869
	// GetConcreteClient returns a client with the hashed secret, however updateClient expects
	// an empty secret if the secret hasn't changed. As such we need to check if the patch has
	// updated the secret or not
	if oldSecret == client.Secret {
		client.Secret = ""
	}

	if err := h.updateClient(r.Context(), client, h.r.ClientValidator().Validate); err != nil {
		h.r.Writer().WriteError(w, r, err)
		return
	}

	h.r.Writer().Write(w, r, client)
}

// Paginated OAuth2 Client List Response
//