Skip to contentSkip to navigationSkip to topbar
Rate this page:
On this page

REST API: Auth Token


(warning)

Warning

If you are using Functions(Classic) or Services and have included your auth token directly instead of using a variable, you must redeploy your classic functions and services when you rotate or update your auth token. Otherwise, those functions and services will fail with a 403 Forbidden error.

Twilio uses the Account SID and Auth Token to authenticate API requests. The Auth Token can be rotated in the Console(link takes you to an external page) or with this API. There are two related endpoints, one to create or delete the secondary Auth Token and this one to promote the secondary Auth Token.


Auth Token properties

auth-token-properties page anchor
Property nameTypePIIDescription
account_sidSID<AC>
Not PII

The SID of the Account that the secondary Auth Token was created for.

Pattern: ^AC[0-9a-fA-F]{32}$Min length: 34Max length: 34

auth_tokenstring
PII MTL: 0 days

The promoted Auth Token that must be used to authenticate future API requests.


date_createdstring<date-time>

The date and time in UTC when the resource was created specified in ISO 8601(link takes you to an external page) format.


date_updatedstring<date-time>

The date and time in GMT when the resource was last updated specified in ISO 8601(link takes you to an external page) format.


urlstring<uri>

The URI for this resource, relative to https://accounts.twilio.com


Update an AuthTokenPromotion resource

update-an-authtokenpromotion-resource page anchor
POST https://accounts.twilio.com/v1/AuthTokens/Promote

This action will delete the current primary Auth Token, and promote the secondary Auth Token to primary.

Promote the Secondary Auth Token

promote-the-secondary-auth-token page anchor
Node.js
Python
C#
Java
Go
PHP
Ruby
twilio-cli
curl

_10
// Download the helper library from https://www.twilio.com/docs/node/install
_10
// Find your Account SID and Auth Token at twilio.com/console
_10
// and set the environment variables. See http://twil.io/secure
_10
const accountSid = process.env.TWILIO_ACCOUNT_SID;
_10
const authToken = process.env.TWILIO_AUTH_TOKEN;
_10
const client = require('twilio')(accountSid, authToken);
_10
_10
client.accounts.v1.authTokenPromotion()
_10
.update()
_10
.then(auth_token_promotion => console.log(auth_token_promotion.dateCreated));

Output

_10
{
_10
"account_sid": "ACXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX",
_10
"auth_token": "bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
_10
"date_created": "2015-07-31T04:00:00Z",
_10
"date_updated": "2015-07-31T04:00:00Z",
_10
"url": "https://accounts.twilio.com/v1/AuthTokens/Promote"
_10
}


Rate this page: