---
title: "Retrieve the OAuth access token of a user"
method: GET
path: "/users/{user_id}/oauth_access_tokens/{provider}"
tags: ["Users"]
---

# Retrieve the OAuth access token of a user

`GET /users/{user_id}/oauth_access_tokens/{provider}`

Fetch the corresponding OAuth access token for a user that has previously authenticated with a particular OAuth provider.
For OAuth 2.0, if the access token has expired and we have a corresponding refresh token, the access token will be refreshed transparently the new one will be returned.

## Path parameters

- `user_id` string, required
- `provider` string, required

## Query parameters

- `paginated` boolean
- `limit` integer
- `offset` integer

## Response `200`

Success

- object[]
  - `object` 'oauth_access_token', required
  - `external_account_id` string, required — External account ID
  - `provider_user_id` string, required — The unique ID of the user in the external provider's system
  - `token` string, required — The access token
  - `expires_at` integer, nullable, required — Unix timestamp of the access token expiration.
  - `provider` string, required — The ID of the provider
  - `public_metadata` object, required
  - `label` string, nullable, required
  - `scopes` string[] — The list of scopes that the token is valid for. Only present for OAuth 2.0 tokens.
  - `id_token` string — The ID token retrieved from the OIDC provider. Only present for OIDC-compliant OAuth 2.0 providers when available.
  - `token_secret` string — The token secret. Only present for OAuth 1.0 tokens.

## Other responses

- `400` — Request was not successful
- `404` — Resource not found
- `422` — Invalid request parameters

---

[API](https://skmtc.net/clerk/apis/clerk-backend-api.md) · [All operations](https://skmtc.net/clerk/apis/clerk-backend-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/clerk/clerk-backend-api/revisions/75df3a43fcb2/schema)