Skip to main content

ory patch oauth2-config

ory patch oauth2-config

Patch an Ory Cloud project's OAuth2 config


Patch an Ory Cloud project's OAuth2 service configuration. Only values specified in the patch will be overwritten. To replace the config use the update command instead.

Compared to the patch project command, this command only updates the OAuth2 service configuration and also only returns the OAuth2 service configuration as a result. This command is useful when you want to import an Ory Keto config as well, for example. This allows for shorter paths when specifying the flags

ory patch identity-config ecaaa3cb-0730-4ee8-a6df-9553cdfeef89 \
--replace '/strategies/access_token="jwt"'

when compared to the patch project command:

ory patch project ecaaa3cb-0730-4ee8-a6df-9553cdfeef89 \
--replace '/strategies/access_token="jwt"'

The format of the patch is a JSON-Patch document. For more details please check:
ory patch oauth2-config <project-id> [flags]


$ ory patch oauth2-config ecaaa3cb-0730-4ee8-a6df-9553cdfeef89 \
--replace '/strategies/access_token="jwt"' \
--add '/ttl/login_consent_request="1h"' \
--remove '/strategies/scope' \
--format json-pretty

"oauth2": {
"client_credentials": {
"default_grant_allowed_scope": false
"expose_internal_errors": true,
"grant": {
"jwt": {
"iat_optional": false,
"jti_optional": false,
"max_ttl": "720h0m0s"
// ...


      --add stringArray       Add a specific key to the configuration
-f, --file strings Configuration file(s) (file://config.json,, ...) to update the project
--format string Set the output format. One of table, json, yaml, and json-pretty. (default "default")
-h, --help help for oauth2-config
-q, --quiet Be quiet with output printing.
--remove stringArray Remove a specific key from the configuration
--replace stringArray Replace a specific key in the configuration
-y, --yes Confirm all dialogs with yes.

Options inherited from parent commands

  -c, --config string   Path to the Ory Cloud configuration file.