Remove old appliction clients via an API?

Skip to first unread message

Joshua Brown

Jul 17, 2023, 10:28:10 AMJul 17
to Discuss

In my quest to automate standing up and tearing down GCS instances, I'm running into a few issues. Currently, one of the problems that I am hitting when trying to create idempotent commands is when I try to cleanup an endpoint, it looks like the gcs application credentials still show up in the web UI after the endpoint has been cleaned up.

sudo globus-connect-server endpoint cleanup -c $CLIENT_ID -y

To remove them I am having to manually log in to the Globus developer UI and delete them. Is there a pathway for automating removal of the GCS client?



Jason Alt

Jul 17, 2023, 10:40:27 AMJul 17
to Joshua Brown, Discuss
Automatic cleanup of the endpoint's client credentials when running 'endpoint cleanup' is on our list of features we plan to include. Note that doing so will cause the command to become interactive since the operation requires user credentials in order to access the Globus Auth API. The non-interactive path will be to use client credentials with the GCS CLI operations and assign the client as a project admin on the Auth project that contains the endpoint's credentials.

In the meantime, I believe you can use the Globus CLI with client credentials (see to delete the endpoint client from the Auth project. See and make use of the 'globus api auth delete' subcommand.  

Reply all
Reply to author
0 new messages