Register an OAuth application

Registration steps#

1. From an eligible paid account, open Control Panel → Applications → Connect and read mailboxes.
2. Enter a recognizable app name and exact callback, such as https://client.example/oauth/callback.
3. Register and save client_id and client_secret. The secret appears once and must not be sent to browser code or Git.
4. Start Authorization Code authorization with PKCE S256. Registration alone does not grant mailbox access.

Callback URLs#

Up to 10 callback URLs can be registered. Use HTTPS; http://localhost is allowed for local development subject to URL validation. redirect_uri must exactly match a registered callback, including protocol, path and trailing slash. Do not use an open redirect callback.

Discover metadata#

GET https://raselmail.com/.well-known/oauth-authorization-server