TRtreasure
OAuth Tokens

Get OAuth tokens

Changed on

Retrieves the account's live OAuth tokens: those whose row is not revoked, including tokens whose access half has expired, because a refreshable one can be exchanged for a new access token until the row is revoked -- a refresh token never expires. Administrators only, authenticated by an apikey or a session; an OAuth bearer token is refused. Token and refresh token strings are never returned.

Requires the eng-lc-oauth-token-management launch control flag on the account.

The response is always paged. sorted_by accepts created_at:asc and created_at:desc; without it the page is ordered by id ascending.

A client that still holds a token revokes it itself at POST /oauth/revoke (RFC 7009), which needs no administrator.

get/oauth_token/list

Request

Query parameters

user_idId (unresolved $ref)

only list the tokens owned by this user. An empty value is no filter at all; a value that is not a plain decimal id, or that names a user outside the account, matches nothing rather than being an error

page[size]integer
Example:30

Max number of results.

page[after]string base64
Example:eyJpZCI6IjEyMyJ9

Cursor for the current page. If omitted, the first page is returned. It must be a Base64-encoded JSON string, including an object with a single entry. For example, the cursor eyJpZCI6IjEyMyJ9 is decoded to {"id":"123"}.

sorted_bystring
Example:created_at:desc

Sort order for the results. If omitted, the default sort order is applied. Format: <key>:asc or <key>:desc

Response

OK

paginationPagination required(unresolved $ref)

Changes