POST/api/v1/dev/apps/:appId/secrets/rotate轮换应用密钥
Try it 面板需要启用 JavaScript。
生成新的 clientSecret,旧密钥立即失效;新密钥仅此一次完整返回。
Request
| Name | Data Type | Required | Description |
| Authorization | string | Yes | 会话令牌认证,格式 `Bearer <sessionToken>` |
type RequestHeaders = {
/** 会话令牌认证,格式 `Bearer <sessionToken>` */
Authorization: string
}
URL Parameters
| Name |
Data Type |
Description |
| appId |
string |
应用 ID |
Response
Body
| Name | Data Type | Required | Description |
| clientId | string | Yes | 客户端标识(不变) |
| clientSecret | string | Yes | 新密钥(仅此一次完整返回) |
| rotatedAt | string | Yes | 轮换时间 |
type ResponseBody = {
/** 客户端标识(不变) */
clientId: string
/** 新密钥(仅此一次完整返回) */
clientSecret: string
/** 轮换时间 */
rotatedAt: string
}
{
"clientId": "cli_9f2ka81mdx",
"clientSecret": "cs_8Wn3tXcV6mB1qL5rY9uH2eK4",
"rotatedAt": "2026-10-14T14:00:00Z"
}
HTTP Code
| HTTP Status |
Meaning |
Notes |
| 200 |
成功 |
返回新密钥 |
| 403 |
应用已封禁 |
封禁应用不可轮换 |
Response Code
响应使用统一信封 {id, code, messages, result},其 code 字段:
| code |
Meaning |
Notes |
| 0 |
成功 |
返回新密钥,旧密钥立即失效 |
| 2702 |
应用已封禁 |
封禁应用不可轮换 |
Examples
POST /api/v1/dev/apps/01JD8SNST2N5U6X1BU9YBHK4C7J/secrets/rotate
Authorization: Bearer st_7c1f9e05b28d4a63
{
"id": "01JD8SSNDI2D0FYZ",
"code": 0,
"messages": [],
"result": {
"clientId": "cli_9f2ka81mdx",
"clientSecret": "cs_8Wn3tXcV6mB1qL5rY9uH2eK4",
"rotatedAt": "2026-10-14T14:00:00Z"
}
}