Skip to main content
POST
Mint picker token

Path Parameters

workspaceId
string<uuid>
required

Workspace identifier.

connectionId
string
required

Opaque identifier of the connection.

Pattern: ^conn_[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$

Body

application/json

Body for minting a browser file-picker token.

The OneDrive v8 picker requests a token per resource (it names the resource in each authenticate command); the caller passes that resource so the server mints a token scoped to exactly it. Ignored by providers whose picker takes a single provider token (Google Drive, Box); omit it for those.

Body for minting a browser file-picker token.

The OneDrive v8 picker requests a token per resource (it names the resource in each authenticate command); the caller passes that resource so the server mints a token scoped to exactly it. Ignored by providers whose picker takes a single provider token (Google Drive, Box); omit it for those.

resource
string

The resource the picker asked for (its authenticate command's resource), e.g. https://contoso-my.sharepoint.com. Optional; when absent the server uses the connection's default picker resource.

Required string length: 1 - 2048

Response

A short-lived provider OAuth access token for a browser file picker.

Carries only the access token and its expiry — never the refresh token, which stays server-side. The token is minted from the connection's stored credentials and is short-lived (the provider's access-token lifetime), so the browser holds a narrow, expiring credential rather than a durable one.

A short-lived provider OAuth access token for a browser file picker.

Carries only the access token and its expiry — never the refresh token, which stays server-side. The token is minted from the connection's stored credentials and is short-lived (the provider's access-token lifetime), so the browser holds a narrow, expiring credential rather than a durable one.

accessToken
string
required

The provider OAuth access token to hand to the browser picker.

expiresAt
integer<int64>

Unix seconds at which the access token expires, if the provider reports it. None means the provider did not return an expiry.