| App Type | All | Static token or OAuth, see
App types. |
| Name, Description | All | The module and the OAuth consent screen show the name. The
description is only for administrators. |
| Identifier | All | A unique identifier (UUID) that TYPO3 generates. OAuth apps use it as
client ID. |
| Secret | All | Use the button Generate secret token next to the field.
The secret is random, and TYPO3 keeps only its SHA-256 digest. A
dialog shows the token (static token) or client secret (OAuth) one
time. |
| Scopes | All | The scopes that the app can use. See Scopes. |
| Logo | All | An optional image for the OAuth consent screen. |
| Impersonate User | Static token | Required. The backend user of the app. All permissions of this user apply, for
example table, field, page and file permissions. |
| Redirect URI | OAuth | The URI of the app. The user goes back to it after the authorization. |
| Access | All | You can disable an app, or limit it to a time range with a start and
end date. |
