---
title: "Verify an OAuth token without accessing customer data"
method: GET
path: "/api/hello_world/oauth"
tags: ["Testing"]
---

# Verify an OAuth token without accessing customer data

`GET /api/hello_world/oauth`

## Request

- Base URL: `https://app.herondata.io`
- URL: `https://app.herondata.io/api/hello_world/oauth`
- Auth: HTTP bearer

## Response `200`

Token grants identity:read; no Heron tenant authorization is performed

- object
  - `hello` string
  - `organization_id` string
  - `scopes` string[]
  - `subject` string

## Other responses

- `401`: Missing or invalid OAuth token
- `403`: Token lacks identity:read
- `503`: OAuth configuration or signing keys unavailable

## Changes

- **2026-11-03** `bd8008e49534`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/herondata/apis/heron-data-api/changes/api/hello_world/oauth/get.md)

---

[API](https://skmtc.dev/herondata/apis/heron-data-api.md) - [All operations](https://skmtc.dev/herondata/apis/heron-data-api/llms.txt) - [OpenAPI document](https://skmtc.dev/herondata/apis/heron-data-api/revisions/4f9eaaa87f09?raw)