OAuthToken

Tokens for an app (RFC 6749 §5.1). Never cached.

object

Fields

access_tokenstringrequired
cat_live_…: send it as Authorization: Bearer. Lives an hour.
token_type"Bearer"required
expires_inintegerrequired
Seconds the access token lives: 3600.
refresh_tokenstringrequired
crt_live_…: the next refresh token. Store it before you use it: the one you sent no longer works, and sending it again revokes everything.
scopestringrequired
The access token’s scopes, space-separated.
store_idstring (uuid) or nullrequired

Used by

POSTGet or refresh tokens

OAuthToken · example shape

{
  "access_token": "string",
  "token_type": "Bearer",
  "expires_in": 0,
  "refresh_token": "string",
  "scope": "string",
  "store_id": "00000000-0000-4000-8000-000000000000"
}

From the schema: placeholder values, not real data.