Skip to main content
POST
Search

Authorizations

Authorization
string
header
required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Authorization
string
header
required

This API uses OAuth2 with the Client Credential flow. Client Credentials must be sent in the BODY, not the headers. For an example of how to implement this, refer to the c1TokenSource.Token() function.

Body

application/json

XAAResourceServerServiceSearchRequest searches resource servers with filters.

appIds
string[] | null

Optional filter by applications. Empty matches any application.

disabled
boolean | null

Optional filter by disabled state.

pageSize
integer<int32>

Page size (max 100).

pageToken
string

Page token for pagination.

query
string

Optional text query matched against display_name and normalized_audience.

refs
Xaa Resource Server Ref · object[] | null

Optional: fetch a specific set of resource servers by ref (used by websocket notify to re-fetch individual rows).

signingAlgorithmFilter
enum<string>[] | null

Optional filter by signing algorithm. UNSPECIFIED means no filter.

Available options:
XAA_SIGNING_ALGORITHM_UNSPECIFIED,
XAA_SIGNING_ALGORITHM_EDDSA,
XAA_SIGNING_ALGORITHM_RS256,
XAA_SIGNING_ALGORITHM_ES256

Response

200 - application/json

XAAResourceServerServiceSearchResponse returns matching resource servers.

XAAResourceServerServiceSearchResponse returns matching resource servers.

list
Xaa Resource Server · object[] | null

Matching resource servers.

nextPageToken
string

Token for the next page.