{"id":678,"date":"2025-06-18T16:04:00","date_gmt":"2025-06-18T16:04:00","guid":{"rendered":"http:\/\/gogetmuscle.com\/?p=678"},"modified":"2025-06-18T17:41:45","modified_gmt":"2025-06-18T17:41:45","slug":"rotating-public-app-client-secret","status":"publish","type":"post","link":"http:\/\/gogetmuscle.com\/index.php\/2025\/06\/18\/rotating-public-app-client-secret\/","title":{"rendered":"Rotating public app client secret"},"content":{"rendered":"<p><DIV><DIV><SPAN>As it has been discussed on these threads:\u00a0<\/SPAN><\/DIV><BR \/><DIV><SPAN><a href=\"https:\/\/community.hubspot.com\/t5\/APIs-Integrations\/How-to-reset-client-secret\/m-p\/271360\/highlight\/true#M24554\" target=\"_blank\" rel=\"noopener\">https:\/\/community.hubspot.com\/t5\/APIs-Integrations\/How-to-reset-client-secret\/m-p\/271360\/highlight\/true#M24554<\/a><\/SPAN><\/DIV><BR \/><DIV><SPAN><a href=\"https:\/\/community.hubspot.com\/t5\/APIs-Integrations\/Help-on-Oauth2-Client-Secret-Rotation\/m-p\/1133322#M81462\" target=\"_blank\" rel=\"noopener\">https:\/\/community.hubspot.com\/t5\/APIs-Integrations\/Help-on-Oauth2-Client-Secret-Rotation\/m-p\/1133322#M81462<\/a><\/SPAN><\/DIV><BR \/><DIV><SPAN><a href=\"https:\/\/community.hubspot.com\/t5\/APIs-Integrations\/How-to-reset-client-secret\/m-p\/271208#M24533\" target=\"_blank\" rel=\"noopener\">https:\/\/community.hubspot.com\/t5\/APIs-Integrations\/How-to-reset-client-secret\/m-p\/271208#M24533<\/a><\/SPAN><\/DIV><BR \/><DIV><SPAN>it seems that is not possible for me to rotate the client secret of a public app by myself, but it&#8217;s possible for the HubSpot team to help with this.<\/SPAN><\/DIV><BR \/><DIV><SPAN>First of all, I&#8217;m not sure on the specifics of what rotating the secret client will entail since it&#8217;s not publicly documented, there is this post here:\u00a0<a href=\"https:\/\/community.hubspot.com\/t5\/APIs-Integrations\/Help-on-Oauth2-Client-Secret-Rotation\/m-p\/1133884\/highlight\/true#M81484\" target=\"_blank\" rel=\"noopener\">https:\/\/community.hubspot.com\/t5\/APIs-Integrations\/Help-on-Oauth2-Client-Secret-Rotation\/m-p\/1133884\/highlight\/true#M81484<\/a> but since the author is not from the HubSpot team I want to make sure of what will happen before going through with the rotation. I&#8217;ve got the following questions.<\/SPAN><\/DIV><BR \/><DIV><SPAN>1.<\/SPAN><SPAN> will the previous client secret be invalidated immediately when a new client secret is created?<\/SPAN><\/DIV><BR \/><DIV><SPAN>2.<\/SPAN><SPAN> is it possible to have the old and new client secrets to be valid at the same time?<\/SPAN><\/DIV><BR \/><DIV><SPAN>3.<\/SPAN><SPAN> given that the public app is in production, we already have many customer that have authenticated and we got their credentials, will these credentials be invalidated after the rotation? would we need to request the users to reauthenticate to the application?<\/SPAN><\/DIV><BR \/><DIV><SPAN>4.<\/SPAN><SPAN> will rotating the client secret generate any disruption on the webhooks the application receives from HubSpot?<\/SPAN><\/DIV><BR \/><DIV><SPAN>Please let me know if you can help me with this.<\/SPAN><\/DIV><BR \/><DIV><SPAN>Thanks in advance.<\/SPAN><\/DIV><DIV>\u00a0<\/DIV><\/DIV><\/p>\n","protected":false},"excerpt":{"rendered":"<p>As it has been discussed on these threads:\u00a0https:\/\/community.hubspot.com\/t5\/APIs-Integrations\/How-to-reset-client-secret\/m-p\/271360\/highlight\/true#M24554https:\/\/community.hubspot.com\/t5\/APIs-Integrations\/Help-on-Oauth2-Client-Secret-Rotation\/m-p\/1133322#M81462https:\/\/community.hubspot.com\/t5\/APIs-Integrations\/How-to-reset-client-secret\/m-p\/271208#M24533it seems that is not possible for me to rotate the client secret of a public app by myself, but it&#8217;s possible for the HubSpot team to help with this.First of all, I&#8217;m not sure on the specifics of what rotating the secret client will entail since it&#8217;s [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[14],"tags":[],"_links":{"self":[{"href":"http:\/\/gogetmuscle.com\/index.php\/wp-json\/wp\/v2\/posts\/678"}],"collection":[{"href":"http:\/\/gogetmuscle.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/gogetmuscle.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/gogetmuscle.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/gogetmuscle.com\/index.php\/wp-json\/wp\/v2\/comments?post=678"}],"version-history":[{"count":1,"href":"http:\/\/gogetmuscle.com\/index.php\/wp-json\/wp\/v2\/posts\/678\/revisions"}],"predecessor-version":[{"id":679,"href":"http:\/\/gogetmuscle.com\/index.php\/wp-json\/wp\/v2\/posts\/678\/revisions\/679"}],"wp:attachment":[{"href":"http:\/\/gogetmuscle.com\/index.php\/wp-json\/wp\/v2\/media?parent=678"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/gogetmuscle.com\/index.php\/wp-json\/wp\/v2\/categories?post=678"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/gogetmuscle.com\/index.php\/wp-json\/wp\/v2\/tags?post=678"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}