Mint picker token
Returns a short-lived provider access token for a browser file picker (file services with a token-based picker only). The refresh token is never returned. An optional body { resource } names the resource the picker requested (used by the OneDrive picker, which requires a SharePoint-audience token); providers whose picker takes a single token ignore it. The OneDrive picker is available only for work or school (OneDrive for Business) accounts.
Path Parameters
Workspace identifier.
Opaque identifier of the connection.
^conn_[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$Body
Body for minting a browser file-picker token.
The OneDrive v8 picker requests a token per resource (it names the resource in
each authenticate command); the caller passes that resource so the server
mints a token scoped to exactly it. Ignored by providers whose picker takes a
single provider token (Google Drive, Box); omit it for those.
Body for minting a browser file-picker token.
The OneDrive v8 picker requests a token per resource (it names the resource in
each authenticate command); the caller passes that resource so the server
mints a token scoped to exactly it. Ignored by providers whose picker takes a
single provider token (Google Drive, Box); omit it for those.
The resource the picker asked for (its authenticate command's
resource), e.g. https://contoso-my.sharepoint.com. Optional; when
absent the server uses the connection's default picker resource.
1 - 2048Response
A short-lived provider OAuth access token for a browser file picker.
Carries only the access token and its expiry — never the refresh token, which stays server-side. The token is minted from the connection's stored credentials and is short-lived (the provider's access-token lifetime), so the browser holds a narrow, expiring credential rather than a durable one.
A short-lived provider OAuth access token for a browser file picker.
Carries only the access token and its expiry — never the refresh token, which stays server-side. The token is minted from the connection's stored credentials and is short-lived (the provider's access-token lifetime), so the browser holds a narrow, expiring credential rather than a durable one.