Connected Apps

User-related API environment

Pre-live user-related API docs

These pages describe the Pre-live user-related API stack.

Use pre-live OAuth credentials, pre-live API base URLs, and pre-live app URLs when following this documentation. Keep your OAuth flow, API requests, callback URLs, and manual testing within the pre-live environment.

• Use prelive.quran.com for auth-related testing.
• Use prelive.quranreflect.org for Quran Reflect paths where applicable.
• Do not mix production sessions or production user data with pre-live testing.

View connected apps and manage their authorization and stored data.

📄️ Get a CSRF token for authenticated user actions

Issues a request token bound to the authenticated browser session. Fetch it with credentials enabled immediately before a Connected Apps lifecycle action, retain the _csrf cookie from this response, and send the JSON token in the X-CSRF-Token header with the retained cookies.

📄️ List connected apps for the authenticated user

Groups every linked OAuth client under its logical app and returns metadata only. Raw OAuth client and App State namespace identifiers are never returned.

📄️ Run a connected-app lifecycle action

Revokes the authenticated user’s consent for every linked OAuth client, deletes the shared App State namespace once, or performs both in order. Exact retries reuse the same high-entropy request ID.