Reference

Client credentials

← Paths home · Used by both WaaS and Communities.

What you store

issuer = https://auth.briij.org/
client_id from /developer
client_secret only for confidential clients (shown once at create / rotate)
Exact redirect URI allowlist entries

Public vs confidential

Type	When	Secret	How users sign in
`public`	SPA, mobile, desktop	None	Authorization code + PKCE S256
`confidential`	Server backends	Yes	Authorization code (+ optional client_credentials for M2M)

Client credentials grant (M2M only)

POST https://auth.briij.org/connect/token
Content-Type: application/x-www-form-urlencoded

grant_type=client_credentials
&client_id=YOUR_CLIENT_ID
&client_secret=***
&scope=openid

User login should use auth code + PKCE (and wallet=1 for WaaS UX). Client credentials never replaces end-user wallet login.

Rotate / delete

In the portal: rotate secret (confidential) or delete the app. Delete removes the OIDC client and frees the free-tier client slot.

Open portal Back to WaaS path