fyi.opensocial.listGroupTokens

The OAuth sessions issued by this host for the group DID (apps acting as the group), plus recent activity. Requires group.configure.

Details · query
Kindquery
Authorityopensocial.fyi
Indexed

Showing version bafyreidp7e4u3iq2maztrkf6ujsxs77egjgncf4to5q2qsg3uvfsq6hxzq. Show the latest

Query

query · GET

Parameters

query string

group

requiredstring · did

Output

application/json

activity

requiredarray
itemsref
Reference

sessions

requiredarray
itemsref
Reference

#activityView

object

Something an app did as the group.

Properties

action

requiredstring

The method it called, or the record it wrote.

Who let the app in, with their handle where it can be read.

at

requiredstring · datetime

clientId

string

The app's OAuth client id.

member

requiredstring · did

Who let the app in.

Whom the write is about, with their handle where it can be read: whose DID keys the record (a membership), or whose inbox it was written in (an invite).

The record it wrote, in parts, when it was a write.

Reference

#sessionView

object

A session an app holds as the group.

Properties

Who let it in, with their handle where it can be read.

clientId

requiredstring

The app's OAuth client id.

expiresAt

string · datetime

grantedAt

requiredstring · datetime

lastUsedAt

string · datetime

member

requiredstring · did

Who let it in.

role

string

The role it was given, if one.

scope

string

source

requiredstring
  • knownValues: oauth | getGroupAuth | appPassword

tokenId

requiredstring

#writeView

object

A record an app wrote as the group.

Properties

collection

requiredstring · nsid

operation

requiredstring
  • knownValues: create | update | delete

rkey

requiredstring

The record's key.

space

string

The space it was written in, by its at:// address; none for the group's public repo.

Similar lexicons

semantic match

Lexicons whose schemas describe something close to this one. Check them before publishing a new one that overlaps.

  • Obtain a DPoP-bound OAuth access token to act as the group DID. The host is the group's PDS and authorization server: the caller authenticates with their personal account (service auth) and presents a DPoP proof; the host issues a short-lived token for the group DID whose space: scopes are exactly what the caller's roles are granted by the space's access record. No group password is involved. The same token may write those kinds of record in the group's public repo too (repoCollections): publish