---
title: "Get User Token (getUserTokenByMobileSecret)"
method: GET
path: "/api/noauth/qr/{secret}"
tags: ["qr-code-settings-controller"]
---

# Get User Token (getUserTokenByMobileSecret)

`GET /api/noauth/qr/{secret}`

Returns the token of the User based on the provided secret key.

## Path parameters

- `secret` string, required

## Response `200`

OK

- JwtPair — JWT Pair
  - `token` string — The JWT Access Token. Used to perform API calls.
  - `refreshToken` string — The JWT Refresh Token. Used to get new JWT Access Token if old one has expired.
  - `scope` 'SYS_ADMIN' | 'TENANT_ADMIN' | 'CUSTOMER_USER' | 'REFRESH_TOKEN' | 'PRE_VERIFICATION_TOKEN' | 'MFA_CONFIGURATION_TOKEN'

---

[API](https://skmtc.net/thingsboard/apis/thingsboard-rest-api.md) · [All operations](https://skmtc.net/thingsboard/apis/thingsboard-rest-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/thingsboard/thingsboard-rest-api/revisions/40169ccdec5c/schema)