Create a New Client Token Version

POST

https://api.withpersona.com/api/v1/client-tokens/:client-token-id/rotate

POST

/api/v1/client-tokens/:client-token-id/rotate

curl -X POST https://api.withpersona.com/api/v1/client-tokens/client-token-id/rotate \
     -H "Authorization: Bearer <token>" \
     -H "Content-Type: application/json" \
     -d '{}'

{
  "data": {
    "type": "client-token",
    "id": "ctk_ABC123",
    "attributes": {
      "name": "Default Client Token",
      "api-version": "2023-01-05",
      "api-key-inflection": "kebab",
      "permissions": [
        "sentinel.collect",
        "txn.write"
      ],
      "domain-allowlist": [
        "*.example.com",
        "api.example.com"
      ],
      "allowed-resources": [
        "txntp_ABC123",
        "txntp_DEF456"
      ],
      "version-expires-in-seconds": null,
      "disabled-at": null,
      "disabled": false,
      "created-at": "2023-08-17T23:18:13.000Z"
    },
    "relationships": {
      "versions": {
        "data": [
          {
            "type": "client-token-version",
            "id": "ctkv_DEF456"
          }
        ]
      }
    }
  },
  "included": [
    {
      "type": "client-token-version",
      "id": "ctkv_DEF456",
      "attributes": {
        "value": "persona_production_abcdefg",
        "created-at": "2023-08-18T23:18:13.000Z",
        "expires-at": null,
        "status": "active"
      },
      "relationships": {
        "client-token": {
          "data": {
            "type": "client-token",
            "id": "ctk_ABC123"
          }
        }
      }
    }
  ]
}

Rotates a Client Token by creating a new version without disabling existing versions. A Client Token can have up to five usable versions; disable an existing version before rotating if the limit has been reached. The new version’s value is returned in the included response data. Copy the value when you create the version, then update your integrations to use it.

Rotates a Client Token by creating a new version without disabling existing versions. A Client Token can have up to five usable versions; disable an existing version before rotating if the limit has been reached. The new version's value is returned in the `included` response data. Copy the value when you create the version, then update your integrations to use it.

Authentication

AuthorizationBearer

Bearer authentication of the form Bearer <token>, where token is your auth token.

Path parameters

client-token-idstringRequired

The ID of the client token to be rotated.

Query parameters

includestringOptional

A comma-separated list of relationship paths. This can be used to customize which related resources will be fully serialized in the included key in the response. See Serialization for more details.

A comma-separated list of relationship paths. This can be used to customize which related resources will be fully serialized in the `included` key in the response. See [Serialization](https://docs.withpersona.com/serialization#inclusion-of-related-resources) for more details.

fieldsmap from strings to stringsOptional

Comma-separated list(s) of attributes to include in the response. This can be used to customize which attributes will be serialized in the response. See Serialization for more details.

Comma-separated list(s) of attributes to include in the response. This can be used to customize which attributes will be serialized in the response. See [Serialization](https://docs.withpersona.com/serialization#sparse-fieldsets) for more details.

Request

This endpoint expects an object.

metaobjectOptional

Response headers

RateLimit-Limitinteger

The maximum number of requests permitted in the current rate limit window for the API key used to authenticate the request. Returned on every authenticated response.

RateLimit-Remaininginteger

The number of requests remaining in the current rate limit window for the API key used to authenticate the request. Returned on every authenticated response.

RateLimit-Resetinteger

The number of seconds until the current rate limit window resets. Returned on every authenticated response.

Request-IdstringOptional

The unique identifier of the API log entry that recorded this request. Starts with req_. Include this value when reaching out to Persona support. Present on every authenticated response, including error responses.

Persona-Environment-IdstringOptional

The token of the Persona environment that handled the request. Returned on every authenticated response, including most error responses.

Persona-Organization-IdstringOptional

The token of the Persona organization that handled the request. Returned on every authenticated response, including most error responses.

Response

This endpoint returns a Client Token.

dataobject

A Client Token resource

includedlist of objectsOptional

Errors

400

Bad Request Error

401

Unauthorized Error

403

Forbidden Error

404

Not Found Error

409

Conflict Error

422

Unprocessable Entity Error

429

Too Many Requests Error