Issue a new access token.
curl --request POST \
--url https://a.s2.dev/v1/access-tokens \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"id": "<string>",
"scope": {
"access_tokens": {
"exact": "<string>"
},
"basins": {
"exact": "<string>"
},
"op_groups": {
"account": {
"read": false,
"write": false
},
"basin": {
"read": false,
"write": false
},
"stream": {
"read": false,
"write": false
}
},
"ops": [],
"streams": {
"exact": "<string>"
}
}
}
'{
"access_token": "<string>"
}{
"code": "<string>",
"message": "<string>"
}{
"code": "<string>",
"message": "<string>"
}{
"code": "<string>",
"message": "<string>"
}{
"code": "<string>",
"message": "<string>"
}access tokens
Issue a new access token.
Issue a scoped S2 access token for specific resources and operations.
POST
/
access-tokens
Issue a new access token.
curl --request POST \
--url https://a.s2.dev/v1/access-tokens \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"id": "<string>",
"scope": {
"access_tokens": {
"exact": "<string>"
},
"basins": {
"exact": "<string>"
},
"op_groups": {
"account": {
"read": false,
"write": false
},
"basin": {
"read": false,
"write": false
},
"stream": {
"read": false,
"write": false
}
},
"ops": [],
"streams": {
"exact": "<string>"
}
}
}
'{
"access_token": "<string>"
}{
"code": "<string>",
"message": "<string>"
}{
"code": "<string>",
"message": "<string>"
}{
"code": "<string>",
"message": "<string>"
}{
"code": "<string>",
"message": "<string>"
}Access token concepts
Review token scopes, permissions, expiry, and revocation behavior.
Issued tokens use the scope in this request. Scope fields and
auto_prefix_streams
are not inherited from the caller, and requested access must be no broader than
the caller’s effective permissions. See the token issuance scope
rules.Authorizations
Bearer authentication header of the form Bearer <token>, where <token> is your access token.
Body
application/json
Access token ID. It must be unique to the account and between 1 and 96 bytes in length, and must not contain NUL bytes.
Required string length:
1 - 96Access token scope.
Show child attributes
Show child attributes
Namespace streams based on the configured stream-level scope, which must be a prefix. Stream name arguments will be automatically prefixed, and the prefix will be stripped when listing streams.
Expiration time in RFC 3339 format. If not set, the expiration will be set to that of the requestor's token.
Response
Created access token.