OAuth connections - Photon

photon account oauth covers the OAuth side of your account:

Connections are applications you have authorized to act on your behalf.
Scopes are the delegated permissions Photon offers.

OAuth clients — applications you build — belong to an organization and are managed with photon org oauth-client. Browse the automatic command reference.

Scopes

photon account oauth scope list

This reads the live scope catalogue from Photon’s public /v1/auth/oauth/scopes endpoint. The CLI never exposes Photon’s internal scope contract or calls the upstream identity provider directly.

Connections

Connections are applications you authorized, not clients you own. Revoking one removes your grant without deleting the underlying OAuth client.

photon account oauth connection list --limit 25 --order desc
photon account oauth connection list --after connect_app_123
photon account oauth connection revoke connect_app_123 --force

Listing is cursor-based rather than token-based: use --after, --before, --limit, and --order, and JSON output includes the server’s next and previous cursors. Revocation prompts interactively and needs --force in scripts. The application must be authorized again before it can get another token for you.

⌘I