Concepts

Applications and clients

What an application is, which client type to choose, and how redirect URIs and icons work.

An application is your OAuth client: what users authorize when they connect an account, and what every connection and run belongs to. A developer can own many applications, and each application's id is its client_id on the auth link.

Choosing a client type

The client type says whether your code can keep a secret. A backend can. A browser or phone app can't, because anyone can read what ships to it.

TypeProves the code exchange withHolds a secret
PUBLICPKCE (code_challenge, S256), optional but recommendedNo
CONFIDENTIALHTTP Basic client_id:client_secretYes, shown once

Pick public for browser and native apps and confidential for backends. Only a confidential application may send external_user_id on the auth link to tag the connection with your own id for the user.

The type locks once the application has connection history or a live authorization. Changing it later means a new application, so decide before your first real user connects.

Redirect URIs

A redirect URI is where WOOL sends the user back after they connect. They're matched exactly, so https://app.example/callback and https://app.example/callback/ are different entries.

  • Absolute URLs, at most 10 per application.
  • https: and custom schemes are allowed. http: only for localhost, 127.0.0.1, and [::1].
  • No fragments and no embedded credentials.

Register your development callback alongside production so one application works in both places.

Icons

Users see your icon, name, and description on the connect page. Upload a square JPEG, PNG, or WebP of at most 512 KiB in the console.

Deleting an application

Deleting an application from the console revokes every connection it has and removes it with its connection and execution history, icon included. If a run or a sign-in is in progress at that moment, wait for it to finish and try again.

Next steps

Identifiers and credentials explains the ids and tokens you'll handle.