Update Allowed Origins

post/api/client-applications/{clientApplicationId}/update-origins

Add url origins to the client application whitelist. The Initiate Login endpoint will reject non-whitelisted origins. Warning! This is a destructive operation. The allowed origins will be overwritten with the provided list. Use the Get Client Application endpoint to retrieve the current list of allowed origins.

Request

Path Parameters

clientApplicationIdstringrequired
Id of the client application.

Body application/json

allowedOriginsstring[]
The allowed origins for the client application. Minimum one origin is required.

Response

No content.

Request parameters are invalid.

Body application/json

statusCodeintegerrequired
statusNamestringrequired
errorCodestringrequired
errorsobject[]
Items
- messagestring
- pathstring
  The location of the invalid path param, query param or payload attribute.

Subject is not allowed to perform the action with the reason stated in the errorCode.

FORBIDDEN Resource does not exist or there are no sufficient permissions to perform the action.

Body application/json

statusCodeintegerrequired
statusNamestringrequired
errorCodestringrequired
reasonstring

Example

Example Request

ServerAuthentication

curl 'https://api.immersve.com/api/client-applications/{clientApplicationId}/update-origins' \
  --request POST \
  --header 'Authorization: Bearer <access-token>' \
  --header 'Content-Type: application/json' \
  --data '{
  "allowedOrigins": [
    "https://develop-app.com",
    "http://localhost:3000"
  ]
}'

curl 'https://api.immersve.com/api/client-applications/{clientApplicationId}/update-origins' \
  --request POST \
  --header 'Authorization: Bearer <access-token>' \
  --header 'X-Account-Id: <target-account>' \
  --header 'Content-Type: application/json' \
  --data '{
  "allowedOrigins": [
    "https://develop-app.com",
    "http://localhost:3000"
  ]
}'

curl 'https://api.immersve.com/api/client-applications/{clientApplicationId}/update-origins' \
  --request POST \
  --header 'X-Api-Key: <api-key>' \
  --header 'X-Api-Secret: <api-secret>' \
  --header 'Content-Type: application/json' \
  --data '{
  "allowedOrigins": [
    "https://develop-app.com",
    "http://localhost:3000"
  ]
}'

curl 'https://api.immersve.com/api/client-applications/{clientApplicationId}/update-origins' \
  --request POST \
  --header 'X-Api-Key: <api-key>' \
  --header 'X-Api-Secret: <api-secret>' \
  --header 'X-Account-Id: <target-account>' \
  --header 'Content-Type: application/json' \
  --data '{
  "allowedOrigins": [
    "https://develop-app.com",
    "http://localhost:3000"
  ]
}'

curl 'https://test.immersve.com/api/client-applications/{clientApplicationId}/update-origins' \
  --request POST \
  --header 'Authorization: Bearer <access-token>' \
  --header 'Content-Type: application/json' \
  --data '{
  "allowedOrigins": [
    "https://develop-app.com",
    "http://localhost:3000"
  ]
}'

curl 'https://test.immersve.com/api/client-applications/{clientApplicationId}/update-origins' \
  --request POST \
  --header 'Authorization: Bearer <access-token>' \
  --header 'X-Account-Id: <target-account>' \
  --header 'Content-Type: application/json' \
  --data '{
  "allowedOrigins": [
    "https://develop-app.com",
    "http://localhost:3000"
  ]
}'

curl 'https://test.immersve.com/api/client-applications/{clientApplicationId}/update-origins' \
  --request POST \
  --header 'X-Api-Key: <api-key>' \
  --header 'X-Api-Secret: <api-secret>' \
  --header 'Content-Type: application/json' \
  --data '{
  "allowedOrigins": [
    "https://develop-app.com",
    "http://localhost:3000"
  ]
}'

curl 'https://test.immersve.com/api/client-applications/{clientApplicationId}/update-origins' \
  --request POST \
  --header 'X-Api-Key: <api-key>' \
  --header 'X-Api-Secret: <api-secret>' \
  --header 'X-Account-Id: <target-account>' \
  --header 'Content-Type: application/json' \
  --data '{
  "allowedOrigins": [
    "https://develop-app.com",
    "http://localhost:3000"
  ]
}'

Example Response

No response body.

{
  "statusCode": 400,
  "statusName": "Bad Request",
  "errorCode": "INVALID_REQUEST_INPUT",
  "errors": [
    {
      "message": "Invalid type",
      "path": "items[1].attributes.invalidField"
    }
  ]
}

{
  "statusCode": 403,
  "statusName": "Forbidden",
  "errorCode": "FORBIDDEN",
  "reason": "Unauthorized"
}