[GH-ISSUE #3022] [feature]: RFC 7591: Dynamic Client Registration #983

New issue

Open

opened 2026-03-16 17:56:12 +03:00 by kerem · 0 comments

kerem commented

2026-03-16 17:56:12 +03:00

Owner

Originally created by @Zash on GitHub (Apr 27, 2023).
Original GitHub issue: https://github.com/hoppscotch/hoppscotch/issues/3022

Is there an existing issue for this?

I have searched the existing issues

Summary

Use OAuth 2.0 / OIDC Dynamic Client Registration where support has been discovered to fill in client_id and client_secret with minimal additional interaction. Presumably building on existing support for OAuth/OIDC server metadata discovery, whereby endpoints can be discovered, if a "registration_endpoint" is advertised, attempt to register and fill in the client_id and client_secret. Might need to ask for a bootstrap token if the specs are to be believed.

Why should this be worked on?

It's just be so very convenient and easy.

Mentioned in #337 but seems it was not part of #476.

Also because we just implemented this for Prosody and would like to have more things to test that against.

Originally created by @Zash on GitHub (Apr 27, 2023). Original GitHub issue: https://github.com/hoppscotch/hoppscotch/issues/3022 ### Is there an existing issue for this? - [X] I have searched the existing issues ### Summary Use [OAuth 2.0 / OIDC Dynamic Client Registration](https://oauth.net/2/dynamic-client-registration/) where support has been discovered to fill in `client_id` and `client_secret` with minimal additional interaction. Presumably building on existing support for OAuth/OIDC server metadata discovery, whereby endpoints can be discovered, if a `"registration_endpoint"` is advertised, attempt to register and fill in the `client_id` and `client_secret`. Might need to ask for a bootstrap token if the specs are to be believed. ### Why should this be worked on? It's just be so very convenient and easy. Mentioned in #337 but seems it was not part of #476. Also because we just implemented this for [Prosody](https://modules.prosody.im/mod_http_oauth2.html) and would like to have more things to test that against.