---
title: "Update Client Tokens"
method: POST
path: "/api/{serviceId}/client/authorization/update/{clientId}"
tags: ["Client Management"]
---

# Update Client Tokens

`POST /api/{serviceId}/client/authorization/update/{clientId}`

Update attributes of all existing access tokens given to a client application.

## Path parameters

- `serviceId` string, required
- `clientId` string, required

## Request body

- ClientAuthorizationUpdateRequest
  - `subject` string, required — The subject (= unique identifier) of the end-user who has granted authorization to the client application.
  - `scopes` string[] — An array of new scopes. Optional. If a non-null value is given, the new scopes are set to all existing access tokens. If an API call is made using `"Content-Type: application/x-www-form-urlencoded"`, scope names listed in this request parameter should be delimited by spaces (after form encoding, spaces are converted to `+`).

## Response `200`

- ClientAuthorizationUpdateResponse
  - `resultCode` string — The code which represents the result of the API call.
  - `resultMessage` string — A short message which explains the result of the API call.

## Other responses

- `400`
- `401`
- `403`
- `404` — The client was not found.
- `429` — The request exceeded the request rate permitted for the endpoint.
- `500`

---

[API](https://skmtc.net/authlete/apis/authlete-api.md) · [All operations](https://skmtc.net/authlete/apis/authlete-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/authlete/authlete-api/versions/7ad74ab64749/schema)