Customer credentials
Get a subject
/o/{shortId}/api/credentials/subjects/{subject} One customer and every credential issued to them.
Authentication
A client token (Authorization: Bearer …) from POST /oauth2/token with the scope issued:read
.
Path parameters
-
shortIdstring requiredYour organization's short ID, as it appears in your issuer:
https://id.trustaige.com/o/{shortId}. -
subjectstring · uuid requiredThe subject returned when you made the offer.
Responses
- 200 The subject.
Show response fields
-
subjectstring · uuid requiredThe customer.
-
claimedboolean requiredWhether the customer has claimed a credential.
-
credentialsarray of object requiredEvery credential issued to the customer.
Show child attributes
-
idstring requiredThe issued credential.
-
credentialTypestring requiredThe credential type's name.
-
statusstring requiredWhere the credential stands.
One of
offered,issued,suspended,revoked -
issuedAtstring · date-timeWhen the customer first held it, across renewals.
-
expiresAtstring · date-timeWhen it ends, if it has an end.
-
revokedAtstring · date-timeWhen it was revoked.
-
revokedReasonstringWhy it was revoked.
-
revocableboolean requiredWhether it can be revoked or suspended at all. A pass simply ends when it expires.
-
holderIdstring requiredThe customer it was issued to.
-
holderClaimedAtstring · date-timeWhen the customer claimed it.
-
holderAppstringThe app the customer claimed it through.
-
createdAtstring · date-time requiredWhen it was created.
-
-
- 404 Your app made no offer to this subject.
Errors
Errors come back as a code to branch on. What each means and what to do:
| Status | Code | What to do |
|---|---|---|
| 403 | wrong_organization | The token belongs to another organization's app. |
| 404 | unknown_subject | No subject by that ID was minted by your app. |