Return a minimal FAPI client-credentials resource representation.

GET

/api/protected/fapi-resource

Code sample: Shell / cURL

curl --request GET \
  --url https://auth.example.com/api/protected/fapi-resource

Accepts a DPoP-bound client credentials access token whose audience is this exact resource URL. No end-user data is returned.

Authorizations

• dpopAuth

Parameters

Header Parameters

X-FAPI-Interaction-ID

string

Correlation identifier echoed in the response when supplied.

Responses

200

Valid machine-client token.

Media type application/json

object

sub

required

string

/^client:/

client_id

required

string

scope

required

string

Example ^generated

{
  "sub": "example",
  "client_id": "example",
  "scope": "example"
}

401

Error response.

Media type application/json

object

key

additional properties

Example ^generated

{
  "additionalProperty": "example"
}

403

Error response.

Media type application/json

object

key

additional properties

Example ^generated

{
  "additionalProperty": "example"
}