Read current JWT

GET

/jwt

Last modified:2026-09-25 23:21:30

OperationId:ReadCurrentJWT

Decodes the JWT in the Authorization header and returns all of its claims, plus the apiversion of the server that answered. Any valid JWT can call it, and no scope check applies. Use it to find a token's jti before revoking it, or to check exp and user_scope. The registered claims follow RFC 7519, section 4.1. An expired token or an API key returns 401.

Request

Authorization

Provide your bearer token in the

Authorization

header when making requests to protected resources.

Example:

Authorization: Bearer ********************

Responses

🟢200OK

application/json

The token's claims.

Bodyapplication/json

🟠401Unauthorized

Request Example

Shell

JavaScript

Java

Swift

curl --location 'https://awqacore01.crexendocloud.com/ns-api/v2/jwt' \
--header 'Authorization: Bearer <token>'

Response Example

200 - Access token claims

{
    "aud": "ns",
    "exp": 1767312000,
    "iat": 1767225600,
    "iss": "core1.example.com",
    "req_host": "core1.example.com",
    "jti": "0123456789abcdef0123456789abcdef01234567",
    "sub": "1001@example.com",
    "time_out": 86400000,
    "domain": "example.com",
    "territory": "example-territory",
    "user": "1001",
    "user_email": "user@example.com",
    "user_scope": "Basic User",
    "displayName": "Front Desk",
    "mask_chain": null,
    "avatar": null,
    "token_type": "access",
    "login": "1001@example.com",
    "apiversion": "46.0.0"
}

Modified at 2026-09-25 23:21:30

Revoke current JWT

Generate short-lived application JWT