Application environments (TenancyEngine)

OAuth clients and runtime endpoints per stage — Development, Staging, and Production. Each environment has its own client ID, redirect URIs, and optional webhook URL.

Console: Application workspace → Environments (/applications/:id/environments)

Add an environment

Choose the environment kind, client ID, authority URL, and optional API base URL. Redirect and post-logout URIs can be edited after creation.

Server OAuth secret

Rotate server secret issues a new confidential client secret for backend services. The plain secret is shown once — store it immediately.

Active flag

Disable an environment to block new token issuance without deleting configuration. Parent application lifecycle still gates tenant access.

Related

• Application settings — lifecycle and defaults
• Application features — contract per environment