Lists the caller's tokens, newest first.

GET

/api/v1/tokens

Errors

401 when nothing was signed in. An instance with accounts turned off answers the same, having no account to be. 403 when the account still owes a password change.

Authorization

cookietessera_session<token>

Set by POST /auth/login. A browser sends it automatically; it is HttpOnly, so page scripts cannot read or set it.

Response Body

The caller's tokens

application/json

response

[index: integer]?

An issued token, as a listing describes it. Never carries the secret.

curl -X GET 'https://example.com/api/v1/tokens'

[  {    "created_at": "string",    "display_prefix": "string",    "expires_at": "string",    "id": "string",    "last_used_at": "string",    "name": "string",    "permissions": [      "string"    ],    "revoked_at": "string"  }]