Find the id of the user who granted OAuth2 access

  • 1 September 2023
  • 1 reply

I’m currently trying to understand whether there’s a way to determine which user granted the OAuth token I’m using in the request?

I’ve found the `API Token Details`, but that appears to only expose company-level information.

Could I achieve this by introspecting the JWT claims? (e.g. `sub`?)


Best answer by jason 1 September 2023, 17:08

View original

1 reply

Userlevel 4
Badge +7

Hi Scott, 

In short - no. JWTs are authorized by a teammate, but the token itself is not linked to a teammate in any way - it’s a company-level resource. 

It’s worth noting that only your global admins can authorize OAuth tokens to be created, so that should narrow down your search.