Legacy Dev Forum Posts

 View Only

Sign Up

Can we decode the OAuthToken to identify the clientId

  • 1.  Can we decode the OAuthToken to identify the clientId

    Posted 06-05-2025 18:33

    Dileepkaranki | 2024-12-03 18:08:52 UTC | #1

    Can we decode the OAuthToken to identify the clientId?


    Jerome.Saint-Marc | 2024-12-04 06:41:52 UTC | #2

    Hello,

    No, the token is a random string. It does not contain information about the ClientId or else.

    If your token is still valid/active, you can use: GET /api/v2/tokens/me to retrieve information about the OAuthClient and the organization.

    Regards,


    Dileepkaranki | 2024-12-04 15:33:11 UTC | #3

    Thank you @Jerome.Saint-Marc This is the solution we implemented yesterday.


    Dileepkaranki | 2024-12-04 16:08:18 UTC | #4

    @Jerome.Saint-Marc Are you saving the token data like clientid,token hash, createddate,expiry date, idle time in the database. I was asking this because support team can provide this information if we send the token.


    tim.smith | 2024-12-04 16:09:52 UTC | #5

    Please remember that sharing auth tokens is a very insecure practice; it's no different than sending someone your password. This is something you should never do.


    Dileepkaranki | 2024-12-04 16:19:58 UTC | #6

    Ya got you tim. Thank you


    system | 2025-01-04 16:19:45 UTC | #7

    This topic was automatically closed 31 days after the last reply. New replies are no longer allowed.


    This post was migrated from the old Developer Forum.

    ref: 30677