Apply for a client

1. Sign in at https://navcom.ai 2. Open Developers → Apply 3. Name, redirect URIs (https, or http://localhost / 127.0.0.1), confidential vs public, extra scopes 4. openid is always required and is not on the form — do not write a reason for it 5. The client is approved immediately. Generate the client secret on the application page (confidential clients). You get client_id on submit. The app owner generates or rotates the client secret — staff never see it. We only store a hash. Disabled clients cannot call /oauth/authorize. Staff can disable an app later. Self-serve approval is on (STAFF_APPROVE_ONLY = False).