GET
/api/admin/users/{uid}/tokensAdminList a user's issued tokens
Lists the most recent 200 access / refresh tokens recorded for the user in the issued-tokens audit table, optionally filtered by kind.
operationId
get_api_admin_users_uid_tokensAdministrationAuthentication & permissionsAdmin
Platform administrators only
- Accepted credentials
- Auth server session (refresh token cookie)
cookie "refresh_token_<auth_server_app_id>" - Access token (cookie)
cookie "access_token_<auth_server_app_id>" - Access token (Bearer)
Authorization: Bearer <JWT>
- Auth server session (refresh token cookie)
- Who may call
- Platform administrators only
Path parameters
| Name | Type | Description |
|---|---|---|
| uid* | string (uuid) | uid of the target user |
Query parameters
| Name | Type | Description |
|---|---|---|
| token_type | "access" | "refresh" | Only list tokens of this kind |
Responses
application/json
| Property | Type | Description |
|---|---|---|
| success* | true | |
| message* | string | |
| data* | object | |
| tokens* | AdminIssuedToken[] | |
| jti* | string | Token id ( |
| uid* | string | |
| token_type* | "access" | "refresh" | Kind of issued token |
| client_app_id* | string | |
| audience* | string | API server id or resource URL the token was minted for |
| grant_type* | "refresh_token" | "authorization_code" | "client_credentials" | |
| issued_at* | number | string | Unix epoch milliseconds (a number, or its decimal string form from the database driver) |
| expires_at* | number | string | Unix epoch milliseconds (a number, or its decimal string form from the database driver) |
| refresh_jti* | string | null | null | For access tokens: the jti of the refresh token minted in the same grant; null otherwise |
JSONExample
"success"true
"message""string"
"data"
"tokens"
Example request
bashcurl
curl -X GET 'https://auth.schemavaults.com/api/admin/users/<uid>/tokens' \
-b 'refresh_token_<auth_server_app_id>=<value>'