Validate an HTTP Bearer Token

You can validate an existing HTTP bearer token.

Procedure

  1. Enter the command to validate the HTTP bearer token.
    curl --insecure -I -H "Accept: application/json" -H "Authorization:  Bearer $token" -H "Cache-Control: no-cache" "https://$vRA/identity/api/tokens/$token"
  2. Examine the response.
    A successful request returns status code 204.

Example: Validate Token Request and Response

The following sample displays output based on the example request.
curl --insecure -I -H "Accept: application/json" -H "Authorization:  Bearer $token" -H "Cache-Control: no-cache" "https://$vRA/identity/api/tokens/$token"
HTTP/1.1 204
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Content-Type: application/json;charset=UTF-8
Date: Thu, 13 Apr 2017 21:56:02 GMT
X-Frame-Options: SAMEORIGIN
The server returns one of the following status codes.
Table 1. Status Codes for Validate a Bearer Token
Status Code Description
204 NO CONTENT The request succeeded.
401 UNAUTHORIZED You must have authentication credentials to access the resource. All requests must be authenticated.
403 FORBIDDEN Your authentication credentials do not provide sufficient access to the resource.
404 NOT FOUND Could not locate the resource based on the specified URI.
405 METHOD NOT ALLOWED The HEAD method is not supported for the resource.
500 SERVER ERROR Could not create or update the resource because of an internal server error.