[Early Access] Set wearable credentials

PUT /v1/wearables/{provider}/credentials

devhttps://api.sandbox.ovok.com

Early Access — interfaces may change without notice.

Write (or replace) the project's OAuth credentials for a wearable provider. Values are encrypted at rest with the project id as salt — same envelope as MAIL_API_KEY — so the raw secrets are never persisted in plaintext. The response returns the same status view as GET, with configured: true once both clientId and clientSecret are on file. Admin-only.

Parameters

Name	In	Type	Required	Description
provider	path	string	yes	Wearable provider slug whose credentials are being written. Currently strava or polar.

Request body

Content-Type: application/json

• clientId: string (required) — OAuth client_id from the provider's developer portal.
• clientSecret: string (required) — OAuth client_secret from the provider's developer portal.
• webhookSecret: string — Webhook signing secret (required for signature verification on inbound events).

Responses

Code	Description
200	Success.
400	The request could not be operated by the server.
401	The resource owner or authorization server denied the request.
404	The requested resource could not be found.
422	The request could not be validated by the server.
500	The server encountered an unexpected condition. Please try again later.

200 → WearableCredentialsStatusDto (application/json)

Status view of a project's wearable OAuth credentials. Returned by GET / PUT / DELETE — raw secrets are never surfaced, only their presence and the last 4 chars of the stored clientId.

• configured: boolean (required) — True when both clientId and clientSecret are on file for this provider.
• clientIdLast4: string (required) — Last 4 characters of the stored clientId, for visual confirmation. null when no clientId is on file.
• hasSecret: boolean (required) — True when a clientSecret is on file. The value itself is never returned.
• hasWebhookSecret: boolean (required) — True when a webhookSecret is on file. Required for inbound signature verification on Polar; optional on Strava.

Example

{
  "configured": true,
  "clientIdLast4": "XY34",
  "hasSecret": true,
  "hasWebhookSecret": true
}