Token Info

You can retrieve metadata about a given customer access token. This is useful for verifying whether a token is valid, understanding what scopes it includes, and checking its expiration.

Request Method: GET

Request Host: shop host (e.g. https://{{handle}}.shoplineapp.com)

Request Endpoint: /oauth/token/info

Request Body: N/A

Request Header:

NameTypeExample
AuthorizationStringBearer <Customer Access Token>

Request URL example:

GET {{shop_host}}/oauth/token/info

Example Response:

Status Code

Example Response Body

200 OK

Token information is successfully retrieved.

{
    "resource_owner_id": "63292fb4cff523028659b38c",
    "scope": [  
        "shop"  
    ],
    "expires_in": 15641553,
    "application": {
        "uid": "G1uYbNH7pKNQKnKloRF6xHhZrNPzppYYDpPolXmg6Jg"
    },
    "created_at": 1742653274,
    "user": {
        "\_id": "63292fb4cff523028659b38c",
        "country_calling_code": null,
        "email": "[[email protected]](mailto:[email protected]) ",
        "locale_code": "en",
        "mobile_phone": null,
        "name": "Mary"
    },
    "merchant": {
        "\_id": "6270afa09ece2a273289d796",
        "email": "[[email protected]](mailto:[email protected])",
        "handle": "mary581",
        "name": "Mary's Store"
    }
}

400 Bad Request

Invalid or missing token provided.

{
    "error": "invalid_request",
    "error_description": {
        "unknown": "The request is missing a required parameter, includes an unsupported parameter value, or is otherwise malformed.",
        "missing_param": "Missing required parameter: %{value}.",
        "not_support_pkce": "Invalid code_verifier parameter. Server does not support pkce.",
        "request_not_authorized": "Request need to be authorized. Required parameter for authorizing request is missing or invalid."
    }
}