OAuth Server Enhancements

As a follow-up to our OAuth Server Enhancements from September 2019, OCLC will begin requiring all WSKeys to be associated with a specific application type on 26 April, 2020. This enhancement will improve the security of your WSKeys and allow OCLC to provide better support for its APIs.

What does this mean going forward?

When requesting new WSKeys, you will need to select the appropriate application type for each request in WSKey Management. Below is a screenshot of the available application types. If you not know which type to request, please select the first option and tell us more about your use case in the "reason for this request" field, and we will be happy to help.

Because a WSKey can only be associated with one application type, please ensure that you request separate WSKeys for each client application going forward.

What does this mean for my existing WSKeys?

To ensure backward compatibility, we have added an application type to all existing WSKeys based on our API usage data. This will help make sure that all WSKeys being used in a single client application continue to work.

Customers who are using the same WSKey across multiple applications should contact devnet@oclc.org for assistance prior to 26 April, 2020.

If you have any questions about this change, or if you experience any issues with your WSKey(s) following the install on 26 April, please contact devnet@oclc.org  to have your WSKey’s application type updated.