Skip to main content

Using the endpoint point “https://api.lucid.co/documents/search” we can get a list of the document as the documentation says :

“Retrieves information about documents that the authenticated user has at least read only access to”

But how to know which user is authenticated when calling this endpoint ?

As the Oauth2.0 App used could be shared to several user, when i use this token, all the documents of my subscription are retrieved even if some user don’t have access to these documents.

Did I miss something ?

Regards.

Hello Michel,

 

That message is in reference to the user corresponding to the token, not the client (or Application). Although many users can grant a token to that Application, each token is only capable of doing things that the user which granted the token can do.

For illustration, if you call the introspect endpoint (https://developer.lucid.co/reference/introspectaccesstoken), you can see the id of the user which the token is acting as.


Hi ​@Michael B 

Thank you for your reply. I did not already look at the introspect endpoint.

I will try that.

Regards.