October 20, 2025
New: Rotate API client secrets
Two new methods allow you to rotate your API client secrets to keep your credentials secure:
- Rotate API Client Secret: Rotate the client secret for any API client credentials by specifying the client ID.
- Rotate Current API Client Secret: Rotate the client secret for the API credentials used in the current request.
When you rotate a client secret, the old secret immediately becomes invalid for new authentication requests. However, access tokens that were issued before the rotation remain valid until they expire, providing a grace period of up to 12 hours for a smooth transition.