User Access Token

  • Updated on Apr 9, 2024
  • 1 minute(s) read
Prev Next
Get
/api/runtime/token/v3

The User Access Token API call is an open-ended question for a specific user, returning the list of allowed assets and their associated actions for a specific application. The API presents a generic request based primarily on the Identity and will return all requested Assets and Actions that are configured for this user in a single token. This API enables the scope to cache the list of authorized Assets for a user within the Application session, thus reducing the overall performance involved in enforcing access.

Notice

When accessing the Authorization APIs, the URL base/prefix, according to your PlainID PDP Location
  • United States Cloud PDP - `https://tenant-name.us1.plainid.io`
  • Canadian Cloud PDP - `https://tenant-name.ca1.plainid.io`
  • European Cloud PDP - `https://tenant-name.eu1.plainid.io`
  • Local PAA - `https://your-paa.acme.local`

    • For more information on which Asset Types to use with your PAA or Cloud PDP, refer to Managing Asset Types.
    Query parameters
    entityId
    string

    Unique identifier of the Identity

    clientId
    string

    Client ID of the Scope

    clientSecret
    string

    Client Secret ID of the Scope

    entityTypeId
    string

    Identity Template ID

    remoteIP
    string

    IP address to be used when validating a policy. Ensure that your IP Ranges are correct based on an IP calculator. If not defined, the IP considered in the calculation is taken from the X-Forwarded-For (Request header).

    includeIdentity
    string

    Show/hide the identity attribute of the identity in the response.

    includeAssetAttributes
    string

    Show/hide the asset attribute of the assets in the response.

    resourceTypes
    array of

    Because the full payload of the response can be very large, this parameter enables you to decrease the payload size by including a list of Asset Types and their attributes, that will return in the response. If not specified, all resources from all resource types will be included.

    Responses
    200

    OK

    400

    Bad Request

    401

    Unauthorized

    403

    Forbidden

    404

    Not Found

    500

    Internal Server Error

    501

    Not Implemented