**As** an admin of an OpenProject installation
**I want to** easily setup an OAuth app for mobile apps
**so that** my users don‘t have to enter a client ID when setting up their mobile app.

**Acceptance criteria**

* Seed OAuth application for the use of mobile apps

* Seeding will also be run for existing installations

* Register non-confidential app Begin of the insertion(that means there is no secret)End of the insertion with predefined Begin of the insertionApplication ID: `openprojectmobileapp`End of the insertion Begin of the deletion generated UIDEnd of the deletion

* Allowed redirect URI: Begin of the insertion`openprojectmobileapp://oauth-callback`

End of the insertion Begin of the deletion `openprojectapp://oauth-callback`

End of the deletion * Begin of the deletion Allow enabling/disabling ofEnd of the deletion OAuth Begin of the insertionApplication name: OpenProject Mobile App



End of the insertion Begin of the deletion application

End of the deletion * Mark the seeded OAuth application as builtin, preventing its deletion or editing Begin of the insertion

* Allow enabling/disabling of OAuth applicationEnd of the insertion

* Enforce PKCE (https://github.com/doorkeeper-gem/doorkeeper/blob/main/CHANGELOG.md). Don't allow changing that value.