Rotate M2M Application Secrets via API
The Kinde Management API doesn't seem to include any way to rotate the
client_secret of an M2M application.
We're using programmatically created applications to provide integration access to our own API, authenticated with Kinde. Creating applications and authorizing our API works fine. But there doesn't seem to be any clear way to rotate the client secret via the API. We can work around this by deleting and creating a new application; but... well... the regular Kinde admin portal has a lovely Rotate button. Why can't we?5 Replies
Hi, thanks for reaching out, and great question!
At the moment, rotating the client secret for an M2M application can only be done through the Kinde dashboard UI — the Management API doesn’t currently support this functionality.
That said, your current workaround of deleting and recreating the application is a solid approach for now, and I appreciate you thinking creatively there. I’ve also shared your feedback with our product team so we can consider adding client secret rotation to the API in the future.
Let me know if there’s anything else I can help with — happy to assist!
Hi, thanks again for reaching out — and you’ve raised a great point!
I wanted to let you know that support for rotating client secrets via the Management API is already on our backlog.
You're not the only one who’s asked for this, and we've passed your feedback along to the product team as another strong signal. We'll be sure to notify you as soon as this functionality becomes available.
In the meantime, feel free to keep using your current workaround — and let us know if there's anything else we can help with!
Hi, I want to know that M2M API for rotating client secrets using app_id is now available or not? @Abdelrahman Zaki - Kinde
Hi @PARTH, support for rotating client secrets via the Management API using app_id is still on our backlog and hasn’t been released yet. That said, I’ve added your name to the list as well so we can notify you as soon as this functionality becomes available.
Thank you
You're very welcome, @PARTH!