---
title: "Get Authorized Applications"
method: POST
path: "/api/{serviceId}/client/authorization/get/list"
tags: ["Client Management"]
---

# Get Authorized Applications

`POST /api/{serviceId}/client/authorization/get/list`

Get a list of client applications that an end-user has authorized.

The subject parameter is required.

## Path parameters

- `serviceId` string, required

## Request body

- ClientAuthorizationGetListRequest
  - `subject` string, required — Unique user ID of an end-user.
  - `developer` string — Unique ID of a client developer.
  - `start` integer — Start index of search results (inclusive).
  - `end` integer — End index of search results (exclusive).

## Response `200`

- ClientAuthorizationGetListResponse
  - `start` integer — Start index of search results (inclusive).
  - `end` integer — End index of search results (exclusive).
  - `developer` string — Unique ID of a client developer.
  - `subject` string — Unique user ID of an end-user.
  - `totalCount` integer — Unique ID of a client developer.
  - `clients` ClientLimited[] — An array of clients.
    - `number` integer — The sequential number of the client. The value of this property is assigned by Authlete.
    - `clientName` string — The name of the client application. This property corresponds to `client_name` in [OpenID Connect Dynamic Client Registration 1.0, 2. Client Metadata](https://openid.net/specs/openid-connect-registration-1_0.html#ClientMetadata).
    - `clientNames` TaggedValue[] — Client names with language tags. If the client application has different names for different languages, this property can be used to register the names.
      - `tag` string — The language tag part.
      - `value` string — The value part.
    - `description` string — The description about the client application.
    - `descriptions` TaggedValue[] — Descriptions about the client application with language tags. If the client application has different descriptions for different languages, this property can be used to register the descriptions.
      - `tag` string — The language tag part.
      - `value` string — The value part.
    - `clientId` integer — The client identifier used in Authlete API calls. The value of this property is assigned by Authlete.
    - `clientIdAlias` string — The value of the client's `client_id` property used in OAuth and OpenID Connect calls. By default, this is a string version of the `clientId` property.
    - `clientIdAliasEnabled` boolean — Deprecated. Always set to `true`.
    - `clientType` 'PUBLIC' | 'CONFIDENTIAL' — The client type, either `CONFIDENTIAL` or `PUBLIC`. See [RFC 6749, 2.1. Client Types](https://datatracker.ietf.org/doc/html/rfc6749#section-2.1) for details.

## Other responses

- `400`
- `401`
- `403`
- `429` — The request exceeded the request rate permitted for the endpoint.
- `500`

## Changes

- **2026-08-03** `7ad74ab64749` — 1 info
  - added the non-success response with the status `429`
- **2026-01-15** `8a534bc68775` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/authlete/apis/authlete-api/changes/api/:serviceId/client/authorization/get/list/post.md)

---

[API](https://skmtc.dev/authlete/apis/authlete-api.md) · [All operations](https://skmtc.dev/authlete/apis/authlete-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/authlete/authlete-api/revisions/7ad74ab64749/schema)