Retrieves the account's live OAuth tokens: those whose row is not revoked, including tokens whose access half has expired, because a refreshable one can be exchanged for a new access token until the row is revoked -- a refresh token never expires. Administrators only, authenticated by an apikey or a session; an OAuth bearer token is refused. Token and refresh token strings are never returned.
Requires the eng-lc-oauth-token-management launch control flag on the account.
The response is always paged. sorted_by accepts created_at:asc and created_at:desc; without it the page is ordered by id ascending.
A client that still holds a token revokes it itself at POST /oauth/revoke (RFC 7009), which needs no administrator.
Security
ApiKeyAuth
- https://api.treasuredata.com/v3https://api.treasuredata.com/v3/oauth_token/list
- https://api.treasuredata.co.jp/v3https://api.treasuredata.co.jp/v3/oauth_token/list
- https://api.ap02.treasuredata.com/v3https://api.ap02.treasuredata.com/v3/oauth_token/list
- https://api.eu01.treasuredata.com/v3https://api.eu01.treasuredata.com/v3/oauth_token/list
curl -i -X GET \
'https://api.treasuredata.com/v3/oauth_token/list?user_id=123&page%5Bsize%5D=30&page%5Bafter%5D=eyJpZCI6IjEyMyJ9&sorted_by=created_at%3Adesc' \
-H 'Authorization: TD1 <YOUR_TOKEN_HERE>'Response
{ "oauth_tokens": [ { … } ], "pagination": { "next_page": "/resources?page[after]=eyJpZCI6IjEyMyJ9" } }