GET
/api/apps/{app_id}/service-accountAuthenticatedGet an app's service account
Returns the client application's service account (the machine identity grant_type=client_credentials tokens are minted for), if any, and whether the app is currently a confidential client, i.e. eligible for that grant. Requires management access; hardcoded apps cannot be configured.
operationId
get_api_apps_app_id_service_accountClient applicationsAuthentication & permissionsAuthenticated
Any authenticated user
- Accepted credentials
- Auth server session (refresh token cookie)
cookie "refresh_token_<auth_server_app_id>" - Access token (cookie)
cookie "access_token_<auth_server_app_id>" - Access token (Bearer)
Authorization: Bearer <JWT>
- Auth server session (refresh token cookie)
- Who may call
- Any authenticated user
Path parameters
| Name | Type | Description |
|---|---|---|
| app_id* | string | Client application id |
Responses
application/json
AppServiceAccountResponse
| Property | Type | Description |
|---|---|---|
| success* | true | |
| service_account* | AppServiceAccountSummary | null | Null until the first client_credentials grant (or explicit creation) |
| uid* | string | The service account's user id ( |
| email* | string | Synthetic, undeliverable address under the reserved |
| created_at* | number | Unix epoch milliseconds |
| disabled* | boolean | A disabled service account is refused the client_credentials grant |
| has_client_secret* | boolean | Whether the app can use the client_credentials grant right now (has a client secret) |
JSONExample
"success"true
"service_account"
"uid""string"
"email""string"
"created_at"1.5
"disabled"true
"has_client_secret"true
Example request
bashcurl
curl -X GET 'https://auth.schemavaults.com/api/apps/<app_id>/service-account' \
-b 'refresh_token_<auth_server_app_id>=<value>'