eBay · Schema

ClientDetails

This container stores information about the third party provider's financial application that has been registered with eBay.

AuctionsCommerceProductsMarketplaceFortune 500

Properties

Name Type Description
client_id string A unique, eBay-generated id assigned to the third party application at the time it was registered.
client_id_issued_at integer The UNIX timestamp when the client_id was issued. This time is represented as the number of seconds from "1970-01-01T00:00:00Z", as measured in UTC, until the date/time of issuance. Refer
client_name string User-friendly name for the third party financial application.

Note: Language tags are not supported. Therefore, client_name will be specified in En
client_secret string A unique OAuth 2.0 secret string assigned by eBay to the third party application at the time it is registered. This value should be unique for multiple instances of a client using the same clien
client_secret_expires_at integer The UNIX timestamp when the client_secret expires.

Note: When a client_secret has been provided, this field is REQUIRED.
contacts array This container stores an array of email addresses for representatives at the third party provider responsible for the application being registered.
grant_types array An array of OAuth 2.0 grant type strings that the client software can use at the token endpoint. Supported grant type values are:
  • authorization_code: The authorization code gr
policy_uri string The URL string pointing to a human-readable privacy policy document that describes how the third party provider collects, uses, retains, and discloses personal data.

<
redirect_uris array An eBay system-generated value assigned to the application. This value represents the redirect uri(s) submitted by the user either in the request payload (i.e., the redirect_uris field,)
scope string String containing a space-separated list of scope values (as described in Section 3.3 of OAuth 2.0 [RFC6749]) that the client can use when requesting access tokens. The semantics of values in this lis
software_id string A unique identifier string provided by the client developer or software publisher at the time of registration that identifies the client software being registered.

Unlike client_id
software_statement string The Software Statement Assertion (SSA), a JSON Web Token (JWT), that has been issued by the OpenBanking identifier. Refer to
View JSON Schema on GitHub

JSON Schema

ebay-clientdetails-schema.json Raw ↑
{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "#/components/schemas/ClientDetails",
  "title": "ClientDetails",
  "type": "object",
  "properties": {
    "client_id": {
      "type": "string",
      "description": "A unique, eBay-generated id assigned to the third party application at the time it was registered."
    },
    "client_id_issued_at": {
      "type": "integer",
      "description": "The UNIX timestamp when the <code>client_id</code> was issued. This time is represented as the number of seconds from \"1970-01-01T00:00:00Z\", as measured in UTC, until the date/time of issuance. Refer to <a href=\"https://datatracker.ietf.org/doc/html/rfc7591#section-2.3 \" target= \"_blank \">RFC 7591 - OAuth 2.0 Dynamic Client Registration Protocol</a> for complete information.",
      "format": "int32"
    },
    "client_name": {
      "type": "string",
      "description": "User-friendly name for the third party financial application.<br/><br/><span class=\"tablenote\"><b>Note:</b> Language tags are not supported. Therefore, <code>client_name</code> will be specified in English.</span>"
    },
    "client_secret": {
      "type": "string",
      "description": "A unique OAuth 2.0 secret string assigned by eBay to the third party application at the time it is registered. This value should be unique for multiple instances of a client using the same <code>client_id</code>. This value is used by confidential clients to authenticate to the token endpoint, as described in OAuth 2.0 [RFC6749], Section 2.3.1.<br/><br/><span class=\"tablenote\"><b>Note:</b> <code>client_secret</code> is unique to the organization identifier of subject name which contains jurisdiction, NCA Id, and Authorization Number.</span>"
    },
    "client_secret_expires_at": {
      "type": "integer",
      "description": "The UNIX timestamp when the <code>client_secret</code> expires.<br/><br/><span class=\"tablenote\"><b>Note:</b> When a <code>client_secret</code> has been provided, this field is <b>REQUIRED</b>.</span><br/>A returned value of <b>0</b> indicates that the <code>client_secret</code> never expires.<br/><br/>This time is represented as the number of seconds from \"1970-01-01T00:00:00Z\", as measured in UTC, until the expiration date and time. Refer to <a href=\"https://datatracker.ietf.org/doc/html/rfc7591#section-3.2.1 \" target= \"_blank \">RFC 7591 - OAuth 2.0 Dynamic Client Registration Protocol section 3.2.1</a> for complete information.",
      "format": "int32"
    },
    "contacts": {
      "type": "array",
      "description": "This container stores an array of email addresses for representatives at the third party provider responsible for the application being registered.",
      "items": {
        "type": "string"
      }
    },
    "grant_types": {
      "type": "array",
      "description": "An array of OAuth 2.0 grant type strings that the client software can use at the token endpoint. Supported grant type values are:<br/><ul><li><code>authorization_code</code>: The authorization code grant type defined in OAuth 2.0, Section 4.1.</li><li><code>client_credentials</code>: The client credentials grant type defined in OAuth 2.0, Section 4.4.</li></ul>If the token endpoint is used in the grant type, the value of this parameter <b>MUST</b> be the same as the value of the <code>grant_type</code> parameter passed to the token endpoint defined in the grant type definition. Authorization servers <b>may</b> allow for other values as defined in the grant type extension process described in OAuth 2.0, Section 4.5. If omitted, the default behavior is that the client will use only the <code>authorization_code</code> Grant Type.",
      "items": {
        "type": "string"
      }
    },
    "policy_uri": {
      "type": "string",
      "description": "The URL string pointing to a human-readable privacy policy document that describes how the third party provider collects, uses, retains, and discloses personal data.<br/><br/><span class=\"tablenote\"><b>Note:</b> Only HTTPS URLs are supported for <code>policy_uri</code> strings.</span><br/><span class=\"tablenote\"><b>Note:</b> This URL <b>must not</b> point to the eBay Privacy Policy.</span><br/>The authorization server should display this secure URL to the end-user if it is provided. The value of this field <b>must</b> point to a valid and secure web page.<br/><br/><span class=\"tablenote\"><b>Note:</b> Language tags are not supported. Therefore, <code>policy_uri</code> will be displayed in English.</span>"
    },
    "redirect_uris": {
      "type": "array",
      "description": "An eBay system-generated value assigned to the application. This value represents the redirect uri(s) submitted by the user either in the request payload (i.e., the <code>redirect_uris</code> field,) or the <code>software_statement</code>.",
      "items": {
        "type": "string"
      }
    },
    "scope": {
      "type": "string",
      "description": "String containing a space-separated list of scope values (as described in Section 3.3 of OAuth 2.0 [RFC6749]) that the client can use when requesting access tokens. The semantics of values in this list are service specific."
    },
    "software_id": {
      "type": "string",
      "description": "A unique identifier string provided by the client developer or software publisher at the time of registration that identifies the client software being registered.<br/><br/>Unlike <code>client_id</code> which should change between instances, the <CODE>software_id</code> should be the same value for all instances of the client software. That is, the <code>software_id</code> should remain unchanged across multiple updates or versions of the same piece of software."
    },
    "software_statement": {
      "type": "string",
      "description": "The Software Statement Assertion (SSA), a JSON Web Token (JWT), that has been issued by the OpenBanking identifier. Refer to <a href=\"https://datatracker.ietf.org/doc/html/rfc7591#section-2.3 \" target= \"_blank \">RFC 7591 - OAuth 2.0 Dynamic Client Registration Protocol</a> for complete information."
    }
  },
  "description": "This container stores information about the third party provider's financial application that has been registered with eBay."
}