Skip to main content
Skip to navigation
API docs by Redocly

Developer API (2.0.0)

Download OpenAPI specification:Download

IAM

Part of the REST API v2 Reference.

Operations about Identity and Access Management.

Endpoints

Authenticate a subscriber

Issues a short-lived RevenueCat access token for the given app_user_id, scoped to the app. The token authenticates the subscriber and is not backed by an IAM user; no id token or refresh token is returned. This endpoint requires the following permission(s): iam:authorization:issue_token. This endpoint belongs to the Iam domain, which has a default rate limit of 60 requests per minute.

Authorizations:
BearerAuth
path Parameters
project_id
required
string <= 255 characters
Example: proj1ab2c3d4

ID of the project

app_id
required
string <= 255 characters
Example: app1ab2c3d4

ID of the app

Request Body schema: application/json
required
app_user_id
required
string [ 1 .. 1500 ] characters

The app user ID of the subscriber to authenticate.

Responses

Request samples

Content type
application/json
{
  • "app_user_id": "19b8de26-77c1-49f1-aa18-019a391603e2"
}

Response samples

Content type
application/json
{
  • "object": "authentication",
  • "access_token": "eyJhbGciOiJSUzI1NiIsImtpZCI6InNrXzEyMyJ9.eyJzdWIiOiJhcHBfdXNlcl8xMjMifQ.signature",
  • "expires_at": 1658399423658
}

Endpoint Reference

All API v2 resources, one page each. General concepts (authentication, pagination, rate limits, error handling) live on the API v2 overview.