Applications

This page explains how to register and manage applications in Revvy. Applications allow secure API integrations using client IDs and client secrets.

Overview

The Applications section is designed for system-to-system integrations. Unlike user accounts, which are meant for people, applications provide credentials that external tools or services can use to authenticate securely with Revvy.

Each application is assigned a Client ID and Client Secret, which work like a username and password for integrations. You can create, edit, disable, regenerate, or delete these credentials at any time.

Why Use Applications

Applications are useful when you need secure integrations between Revvy and external systems:

• Security Boundary

  Each application is isolated. If one secret is compromised, you can regenerate it without affecting other integrations.

• Audit and Governance

  Applications show created/updated timestamps, so you know when credentials were last issued or changed.

• Multi-tenant Mode (future use)

  Normally, an application belongs to a single tenant. Multi-tenant mode would allow one application to work across multiple tenants — useful for ISVs or partner apps built on Revvy.

Viewing Applications

Navigate to Applications from the sidebar. The list displays:

• Application Name

• Client ID (masked)

• Client Secret (masked)

• Status (Active/Disabled)

• Created At and Updated At timestamps

Steps to Create an Application

1. Navigate to the Applications tab in the left sidebar.

2. Click Create.

3. Enter a Name for the application.

4. Click Create to generate the application.

5. Revvy automatically provides:

   • Client ID

   • Client Secret

   • Status (Active by default)

Example

Once created, an application entry appears in the list showing:

• Name (e.g., Revvy)

• Client ID (partially masked)

• Client Secret (partially masked)

• Status (Active)

• Created/Updated timestamps

Application Details

Click on the application name to view details. The detail page includes:

• Application information: Name, Client ID, Client Secret, Status, Multi-tenant mode

• Timestamps: Created At, Updated At

• OAuth information: Access token lifetime, Refresh token lifetime, Allowed flows/scopes

• Authorized URLs: Callback URLs and Sign-out URLs

Editing and Actions

From the Actions menu or Edit button, you can:

• Edit → Update application details

• Disable → Suspend access for that application

• Regenerate Secret → Issue a new Client Secret

• Delete → Permanently remove the application

Best Practices

• Store the Client Secret securely, as it grants API access.

• Rotate secrets periodically to improve security.

• Deactivate or delete unused applications to reduce risk.