What is the Algorithm for the generation of ClientID and Secret for OAuth 2.0 Client Registration?
Hi,
Customer is asking for the algorithm for the generation of the ClientID and the Client Secret for the following:
Customer wants to be assured that the ID generation is unique enough and the secret is secured.
Thanks and looking forward to the advice.
Regards,
Jacky
***Updated by moderator: Lochan to add SR Created group tag***
Accepted Solution
Pegasystems Inc.
US
Hello, this article states that its unique. If that is not the case, please create a support request to have it addressed.
https://pdn.pega.com/accessing-pega-api-using-oauth-20/accessing-pega-api-using-oauth-20
The system generates a unique client ID and secret for each Client Registration data instance, which you can regenerate at any time. The system also generates the endpoints that your client can use to obtain an access token or to revoke issued tokens.