Generate short-lived application JWT

POST

/jwt/application-token

Last modified:2026-09-25 23:21:33

OperationId:createApplicationToken

Issues a JWT that expires 30 seconds after issue, to hand to another application such as a WebSocket server or a third-party validator. It copies every claim of your current JWT and adds an application claim set to the value you send. No refresh token or cookie is returned. Requires a JWT bearer token: an API key or an OAuth access token returns 400. No scope check applies. The request must use HTTPS.

Request

Authorization

Provide your bearer token in the

Authorization

header when making requests to protected resources.

Example:

Authorization: Bearer ********************

Body Params application/jsonRequired

Examples

Responses

🟢200OK

application/json

The application JWT.

Bodyapplication/json

🟠400Bad Request

🟠401Unauthorized

🟠403Forbidden

Request Example

Shell

JavaScript

Java

Swift

curl --location 'https://awqacore01.crexendocloud.com/ns-api/v2/jwt/application-token' \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '{
    "application": "websocket"
}'

Response Example

200 - Application token

{
    "token": "{{application_jwt}}"
}

Modified at 2026-09-25 23:21:33

Read current JWT

Generate MFA authenticator secret