Security

Generate JWT tokens from custom claims

post

https://app.neostore.cloudhttps://app-qa.neostore.cloud

/api/{tenantId}/tokens/generate

Creates one or more JWT tokens with custom claims for advanced authentication scenarios.

Use Cases

• Testing and development
• Service-to-service authentication
• Custom identity workflows
• Token migration scenarios

Authorization

Requires AuthenticationToken.Write scope - restricted to authorized administrators and services.

Validity Duration

• Default: 10 years (3650.00:00:00.000)
• Configurable via query parameter in TimeSpan format
• Examples: 1.00:00:00 (1 day), 30.00:00:00 (30 days)

Request Format

Accepts an array of claim sets, where each set generates one token: [[{"type": "sub", "value": "user123"}, {"type": "email", "value": "[email protected]"}]]

Security Warning

Generated tokens have full authentication authority. Protect endpoint access and token distribution carefully.

Required scopes

This endpoint requires the following scopes:

Authorizations

admin-bearerapiKey

OAuth2implicitRequired

Authorization URL:

Path parameters

tenantIdstringRequired

Query parameters

validityDurationstringOptional

Optional validity duration in TimeSpan format (e.g., "1.00:00:00" for 1 day). Default is 10 years

Bodyobject · WebClaim[][]

application/jsontext/jsonapplication/*+json

typestringOptional

claim type

valuestringOptional

Value

valueTypestring · nullableOptional

optional value type

Responses

200

Tokens generated successfully.

text/plainapplication/jsontext/json

string[]Optional

401

Caller not authenticated.

text/plainapplication/jsontext/json

403

Caller lacks AuthenticationToken.Write scope.

text/plainapplication/jsontext/json

500

Unexpected server error.

post/api/{tenantId}/tokens/generate

HTTPcURLJavaScriptPython

POST /api/{tenantId}/tokens/generate HTTP/1.1
Host: app.neostore.cloud
Authorization: Bearer YOUR_OAUTH2_TOKEN
Content-Type: application/json
Accept: */*
Content-Length: 51

[
  [
    {
      "type": "text",
      "value": "text",
      "valueType": null
    }
  ]
]

application/jsontext/jsonapplication/*+json

[
  "text"
]