Mint a short-lived scoped token whose scopes limit what the holder can do, e.g. install a specific asset on a device through the registry. It is bound to the authenticated caller's organization, and keeping the returned id lets you revoke the token before it expires.

post/v1/scoped_tokens

Request

  • Base URL: https://api.limrun.com
  • URL: https://api.limrun.com/v1/scoped_tokens
  • Auth: none declared

Request body

scopesstring[] required

Scopes in the form <resource>:<id|*>:<action>, e.g. device:*:install, asset:asset_01h455vb4pex5vsknk084sn02q:read or applerelay:*:connect. Resource IDs are the customer-visible IDs returned by the API.

ttlSecondsinteger

How long the token stays valid. Defaults to 3600 (1 hour), maximum is 14400 (4 hours).

Response

OK

idstring required

Identifies this token for revocation. Keep it if you may need to withdraw the token before it expires; it cannot be recovered from the API later.

tokenstring required

The scoped token, to be sent as a Bearer token or the token query parameter.

scopesstring[] required
expiresAtstring date-time required

Changes

No recorded changes to this operation across all 1 revision of this API.