All Products
Search
Document Center

Resource Access Management:UpdateApplication

Last Updated:May 08, 2024

Modifies the information about a specified application.

Debugging

OpenAPI Explorer automatically calculates the signature value. For your convenience, we recommend that you call this operation in OpenAPI Explorer.

Authorization information

The following table shows the authorization information corresponding to the API. The authorization information can be used in the Action policy element to grant a RAM user or RAM role the permissions to call this API operation. Description:

  • Operation: the value that you can use in the Action element to specify the operation on a resource.
  • Access level: the access level of each operation. The levels are read, write, and list.
  • Resource type: the type of the resource on which you can authorize the RAM user or the RAM role to perform the operation. Take note of the following items:
    • The required resource types are displayed in bold characters.
    • If the permissions cannot be granted at the resource level, All Resources is used in the Resource type column of the operation.
  • Condition Key: the condition key that is defined by the cloud service.
  • Associated operation: other operations that the RAM user or the RAM role must have permissions to perform to complete the operation. To complete the operation, the RAM user or the RAM role must have the permissions to perform the associated operations.
OperationAccess levelResource typeCondition keyAssociated operation
ram:UpdateApplicationWrite
  • Application
    acs:ram::{#accountId}:application/{#AppName}
    none
none

Request parameters

ParameterTypeRequiredDescriptionExample
AppIdstringYes

The ID of the application.

472457090344041****
NewDisplayNamestringNo

The display name.

NewApp
NewRedirectUrisstringNo

The callback URL.

If you enter multiple callback URLs, separate them with semicolons (;).

https://www.example.com
NewPredefinedScopesstringNo

The permission that is granted on the application.

For more information about the application permission scope, see OAuth scopes. You can also call the ListPredefinedScopes operation to query the permissions that are supported by different types of applications.

If you enter multiple permissions, separate them with semicolons (;).

The new value of this parameter overwrites the original value, and the permission specified by the new value takes effect. For example, if the original value is /acs/ccc, and the new value is /acs/alidns, /acs/alidns takes effect. If you want to retain the original permission and the /acs/alidns permission, set the value to /acs/ccc;/acs/alidns.

openid
NewRequiredScopesstringNo

The required permission.

You can specify one or more permissions for the RequiredScopes parameter. After you specify this parameter, the required permissions are automatically selected and cannot be revoked when a user grants permissions on the application.

If you also specify the NewPredefinedScopes parameter, the NewPredefinedScopes parameter specifies the permissions that can be granted on the application, and this parameter specifies the required permissions.

If you enter multiple permissions, separate them with semicolons (;).

The new value of this parameter overwrites the original value, and the required permission specified by the new value takes effect.

Note If the permission that you specify for the RequiredScopes parameter is not included in value of the PredefinedScopes parameter, the permission does not take effect.
profile;aliuid
NewSecretRequiredbooleanNo

Specifies whether a secret is required. Valid values:

  • true
  • false
Note
  • For applications of the WebApp and ServerApp types, this parameter is automatically set to true and cannot be changed.
  • For applications of the NativeApp type, this parameter can be set to true or false. If you do not set this parameter, false is used. Applications of the NativeApp type run in untrusted environments and the secrets of these applications are not protected. Therefore, we recommend that you do not set this parameter to true unless otherwise specified. For more information, see Use an application of the NativeApp type to log on to Alibaba Cloud.
true
NewAccessTokenValidityintegerNo

The validity period of the access token.

Valid values: 900 to 10800. Unit: seconds.

3600
NewRefreshTokenValidityintegerNo

The validity period of the refresh token.

Valid values: 7200 to 31536000. Unit: seconds.

7776000
NewIsMultiTenantbooleanNo

Specifies whether the application can be installed by using other Alibaba Cloud accounts. Valid values:

  • true
  • false
true

Response parameters

ParameterTypeDescriptionExample
object

The response parameters.

RequestIdstring

The request ID.

6616F09B-2768-4C11-8866-A8EE4C4A583E
Applicationobject

The information about the application.

DisplayNamestring

The display name of the application.

NewApp
AccessTokenValidityinteger

The validity period of the access token. Unit: seconds.

3600
SecretRequiredboolean

Indicates whether a secret is required.

true
AccountIdstring

The ID of the Alibaba Cloud account to which the application belongs.

177242285274****
CreateDatestring

The creation time.

2020-10-23T08:06:57Z
AppNamestring

The application name.

myapp
RedirectUrisarray

The callback URLs.

string

The callback URL.

https://www.example.com
UpdateDatestring

The update time.

2020-10-23T08:06:57Z
DelegatedScopeobject

The information about the permissions that are granted on the application.

PredefinedScopesobject []

The information about the permissions that are granted on the application.

Descriptionstring

The description of the permission.

Obtain the OpenID of the user. This is the default permission that you cannot remove.
Namestring

The name of the permission.

openid
Requiredboolean

Indicates whether the permission is automatically selected by default when you install the application. Valid values:

  • true
  • false

openid is required by default.

true
AppIdstring

The ID of the application.

472457090344041****
RefreshTokenValidityinteger

The validity period of the refresh token. Unit: seconds.

7776000
IsMultiTenantboolean

Indicates whether the application can be installed by using other Alibaba Cloud accounts.

true
AppTypestring

The application type.

WebApp

Examples

Sample success responses

JSONformat

{
  "RequestId": "6616F09B-2768-4C11-8866-A8EE4C4A583E",
  "Application": {
    "DisplayName": "NewApp",
    "AccessTokenValidity": 3600,
    "SecretRequired": true,
    "AccountId": "177242285274****",
    "CreateDate": "2020-10-23T08:06:57Z",
    "AppName": "myapp",
    "RedirectUris": {
      "RedirectUri": [
        "https://www.example.com"
      ]
    },
    "UpdateDate": "2020-10-23T08:06:57Z",
    "DelegatedScope": {
      "PredefinedScopes": {
        "PredefinedScope": [
          {
            "Description": "Obtain the OpenID of the user. This is the default permission that you cannot remove.",
            "Name": "openid",
            "Required": true
          }
        ]
      }
    },
    "AppId": "472457090344041****",
    "RefreshTokenValidity": 7776000,
    "IsMultiTenant": true,
    "AppType": "WebApp"
  }
}

Error codes

For a list of error codes, visit the Service error codes.

Change history

Change timeSummary of changesOperation
2023-11-23The request parameters of the API has changed. The response structure of the API has changedsee changesets
Change itemChange content
Input ParametersThe request parameters of the API has changed.
    Added Input Parameters: NewRequiredScopes
Output ParametersThe response structure of the API has changed.