Usage of Endpoint to search for documents

Question

Using the endpoint point “https://api.lucid.co/documents/search” we can get a list of the document as the documentation says :

“Retrieves information about documents that the authenticated user has at least read only access to”

But how to know which user is authenticated when calling this endpoint ?

As the Oauth2.0 App used could be shared to several user, when i use this token, all the documents of my subscription are retrieved even if some user don’t have access to these documents.

Did I miss something ?

Regards.

Michael B · Accepted Answer

Hello Michel,That message is in reference to the user corresponding to the token, not the client (or Application). Although many users can grant a token to that Application, each token is only capable of doing things that the user which granted the token can do.For illustration, if youcall the introspect endpoint (https://developer.lucid.co/reference/introspectaccesstoken), you can see the id of the user which the token is acting as.

Michel L · Answer

Hi ​@Michael BThank you for your reply. I did not already look at the introspect endpoint.I will try that.Regards.

Create an account in the community

Log in to the community