---
title: "TokenReview attempts to authenticate a token to a known user. Note: TokenReview requests may be cached by the webhook token authenticator plugin in the kube-apiserver."
method: POST
path: "/oauth/authenticate"
tags: ["Authentication"]
---

# TokenReview attempts to authenticate a token to a known user. Note: TokenReview requests may be cached by the webhook token authenticator plugin in the kube-apiserver.

`POST /oauth/authenticate`

## Request body

- AuthTokenReview
  - `apiVersion` string, required — Kubernetes API version
  - `kind` string, required — kind of the API object
  - `spec` AuthSpec
    - `token` string, required — access token
  - `status` AuthStatus
    - `authenticated` boolean, required — is authenticated
    - `user` object — user info

## Response `200`

ok

- AuthTokenReview
  - `apiVersion` string, required — Kubernetes API version
  - `kind` string, required — kind of the API object
  - `spec` AuthSpec
    - `token` string, required — access token
  - `status` AuthStatus
    - `authenticated` boolean, required — is authenticated
    - `user` object — user info

## Changes

- **2020-10-22** `358f19985531` — 1 info
  - endpoint added
- **2019-08-27** `6d6e730a2d14` — 1 info
  - api path removed with deprecation

[Change history](https://skmtc.dev/kubesphere/apis/ks-api/changes/oauth/authenticate/post.md)

---

[API](https://skmtc.dev/kubesphere/apis/ks-api.md) · [All operations](https://skmtc.dev/kubesphere/apis/ks-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/kubesphere/ks-api/revisions/358f19985531/schema)