UUID Use Case

UUID Client ID

An OAuth client needs a public client_id and a secret. A UUID client_id is unique, opaque, and easy to rotate.

OAuth2Public id + secretv4

Generated locally with the Web Crypto API — nothing leaves your browser.

What Is UUID Client ID?

How to generate

  1. Generate a v4 UUID client_id at registration.
  2. Generate a separate secret (hashed) for the client.
  3. Rotate the secret without changing the id.

Use Cases

Code Examples

JavaScript
const id = crypto.randomUUID();
Python
import uuid
id = uuid.uuid4()

Frequently Asked Questions

Is client_id a secret?
No — it identifies the app in redirects. Only the client_secret is secret.
Can I use the same UUID for many apps?
No — each app needs its own id so you can revoke one without breaking others.

Related tools