Skip to main content

Describes the caller as this API sees them: whether the token authenticated, which client application it belongs to, which account it resolves to, the scopes it carries, and when its secret expires. Call this first when an integration 'isn't working'. It separates a credentials or account-mapping problem from a payload problem before anyone starts reading claim JSON. Takes no parameters by design. The account is resolved from the token, never supplied by the caller, so there is nothing here to point at another tenant. Authorization comes from ApiBaseController's [Authorize]: any authenticated caller may ask about themselves, and about no one else.

GET 

/api/Diagnostics/v1/WhoAmI

Describes the caller as this API sees them: whether the token authenticated, which client application it belongs to, which account it resolves to, the scopes it carries, and when its secret expires.

Call this first when an integration "isn't working". It separates a credentials or account-mapping problem from a payload problem before anyone starts reading claim JSON.

Takes no parameters by design. The account is resolved from the token, never supplied by the caller, so there is nothing here to point at another tenant. Authorization comes from ApiBaseController's [Authorize]: any authenticated caller may ask about themselves, and about no one else.

Responses

OK