# PlaygroundOAuth2Config

**Kind:** Interface

**Source:** [`atloria-monorepo/apps/web/src/lib/api-client.ts`](https://github.com/sherkety/atloria/blob/main/atloria-monorepo/apps/web/src/lib/api-client.ts#L33)

The playground's OAuth2 declaration (`project.settings.playgroundOAuth2`).

Every field is published verbatim in the served spec, so there is nothing to withhold — and
deliberately no client secret: a published documentation page is a public client, and the flow
is protected by PKCE. The API refuses a secret-shaped field outright.

## Properties

| Property | Type |
|---|---|
| `clientId` | `string` |
| `authorizationUrl` | `string` |
| `tokenUrl` | `string` |
| `openIdConnectUrl` | `string` |
| `scopes` | `Record<string, string>` |