Generate a secret key for the built in Oauth2 provider?

I would be interested in using my Akkoma instance as a Oauth2 provider for another self-hosted webapp.

I assume since this works with mobile-apps, the general functionality is already there but there is no GUI for creating the necessary secret and finding the endpoint etc?

Anyone here done this before? Thx!

I assume this is the relevant documentation:

https://docs.akkoma.dev/stable/administration/CLI_tasks/oauth_app/

Will this return a secret to put into the remote webapp configuration?

Also, usually the remote app needs access to the “email” scope for linking accounts to a shared ID. Is that supported?

Is there some way to list and remove previously added trusted apps?

Ah this gives some further hints:

https://docs.akkoma.dev/stable/configuration/cheatsheet/#oauth2-akkoma-as-oauth-20-provider-settings

“fqn” seems to indeed return the email address of the logged in user, but can it be used as Oauth2 scope? Edit: no I was confused. This isn’t a working email address, but the fedi address.

Looks like it is generally possible, the above link gave me the hint to search for Peertube as a client and it returned this for doing what I want with Pleroma as the provider and Peertube as the client:

Worth a try I guess, but I still don’t know how to remove a oauth2 app after creating it as that seems to be not documented at all.