List authorization codes
Retrieves a paginated list of authorization codes issued for the specified user. Authorization codes are ephemeral credentials used in OAuth 2.0 authorization flows before token exchange. Optional query parameters allow searching, filtering, and sorting the results.
Access to grant and token management endpoints requires an active Secure+ subscription.
API-KeyX-API-KEY<token>MonoCloud APIs require authentication with an API key. Retrieve your key from the Tenant Settings section of the MonoCloud dashboard and include it in the request header as: X-API-Key: <your_api_key>
The unique identifier of the user.
The page number to retrieve.
int321 <= value1The number of grants to return per page.
int321 <= value <= 5010Filters results to grants issued to the specified client.
Filters results to grants issued within the specified session.
Sort expression in the format field:direction, where direction is 1 for ascending or -1 for descending.
Supported fields include - creation_time.
Response Headers
200
Returns the x-Pagination header
Number of items returned per page.
int32The current page number.
int32Total number of items available.
int32Indicates whether a previous page exists.
Indicates whether a next page exists.
Response Body
application/json
The user's authorization codes were retrieved successfully
TypeScript Definitions
Use the response body type in TypeScript.
Returns an array. Each item has the fields below.
Authorization Code: Represents a short-lived authorization code issued to a client.
Errors
curl -X GET "https://your-domain.us.monocloud.com/api/users/WUgDGqaqzqkRmsgd3PFAT/grants/codes?page=1&size=10&client_id=eCOGRJYpnNwwAAuCeReEW&session_id=F8B7C57ACB5BEE57AC582D96CAF46D4D&sort=creation_time%3A1" \ -H "X-API-KEY: <token>"[ { "id": "string", "client_id": "string", "creation_time": 0, "session_id": null, "authorized_scopes": [ "string" ], "expiration": null }]List refresh tokens GET
Retrieves a paginated list of refresh tokens issued for the specified user. Optional query parameters allow searching, filtering, and sorting the results.
Revoke client grants DELETE
Revokes all grants issued to the user for the specified application, invalidating existing authorizations.