Update OpenAPI spec (869cb3a)

.last-synced-sha

@@ -1 +1 @@
-9ecac10d7137f8371725ff1234f5fd6068ce7fd3
+869cb3a6144c5d8d30c6bf11ce4618734e20c016

spec/open-api-spec.yaml

@@ -28421,6 +28421,18 @@ components:
             - 'null'
           items:
             $ref: '#/components/schemas/RedirectUriDto'
+        cors_origins:
+          description: >-
+            Origins allowed to call the OAuth token endpoint for this
+            application from a browser.
+          example:
+            - https://app.example.com
+          maxItems: 1000
+          type:
+            - array
+            - 'null'
+          items:
+            type: string
         uses_pkce:
           type:
             - boolean
@@ -28512,6 +28524,19 @@ components:
             - 'null'
           items:
             $ref: '#/components/schemas/RedirectUriDto'
+        cors_origins:
+          description: >-
+            Updated origins allowed to call the OAuth token endpoint for this
+            application from a browser. Replaces the existing list. OAuth
+            applications only.
+          example:
+            - https://app.example.com
+          maxItems: 1000
+          type:
+            - array
+            - 'null'
+          items:
+            type: string
     CreateApplicationSecretDto:
       type: object
       properties: {}
@@ -33198,13 +33223,23 @@ components:
                           - uri
                           - default
                       description: The redirect URIs configured for this application.
+                    cors_origins:
+                      type: array
+                      items:
+                        type: string
+                      description: >-
+                        The CORS origins allowed to call the OAuth token
+                        endpoint for this application from a browser.
+                      example:
+                        - https://app.example.com
                     uses_pkce:
                       type: boolean
                       description: Whether the application uses PKCE for authorization.
                       example: true
                   required:
                     - application_type
                     - redirect_uris
+                    - cors_origins
                     - uses_pkce
                 - oneOf:
                     - type: object