Skip to navigation
API referenceOAuth

View connected applications

Existing browser session; unauthenticated users are redirected to login. Lists only this user’s unexpired grants, with disconnect forms. No token hashes or secrets.

Response headers:

  • Cache-Control (200).
  • Referrer-Policy (200): Native consent form Origin proof; never sends referrers cross-origin.
  • Pragma (200).

Response headers

Cache-Control"no-store"Optional
Referrer-Policy"same-origin"Optional

Native consent form Origin proof; never sends referrers cross-origin.

Pragma"no-cache"Optional

Response

Escaped server-rendered consent/connected-app page. No token is issued by GET.