Manage Permanent Tokens
In Hub, permanent tokens let developers access and perform operations securely using the REST API calls in their scripts and applications without having to implement OAuth 2.0 authentication flows. A permanent token allows access to a service with the permissions that are granted to the user account.
This page covers operations with permanent tokens that are performed in the user profile. For a sample of REST API calls using the permanent token, see https://www.jetbrains.com/help/youtrack/devportal/hub-api-permanent-token.html.
Create a Permanent Token
To access a service programmatically with the permissions that are granted to your user account, create your own permanent token.
In addition to the permissions that are listed here, you need permission to read the service that you want to access with the token. Permission to read the service is granted in two ways:
The Access setting for the service grants group members access to the application from the Services menu. If you are a member of a group that is granted access in this way, you can create a permanent token to access the service.
You are granted the global Low-level Admin Read permission.
If you are logged in and you don't see the option to create a token, ask an administrator to add you to a group for whom the service is visible.
To generate a permanent token:
Click your avatar in the application header, then select the Profile link.
Switch to the Account Security tab.
Click the New token button.
In the New Permanent Token dialog, specify a name for the new token and the access scope for it. The scope for the token is a list of services which you can access with this new token.
Click the Create token button.
A dialog window with the new token is displayed.
Copy the token and store it in a secure location. Use either of these two actions to copy the token:
Click the Copy token button.
Select the token with your pointer and use the standard keyboard shortcut for your operating system to copy the current selection to the clipboard.
After you copy the token, close the dialog.
The new token is associated with your user account and is displayed in the list in the Account Security tab.
Delete a Permanent Token
A permanent token does not have an expiration date. If you suspect that an authenticated service has been compromised, you can explicitly delete this token in your profile.
To delete a permanent token:
Click your avatar in the application header, then select the Profile link.
Switch to the Account Security tab.
In the list of tokens, select the token that you want to revoke.
Click the Delete button.
A confirmation dialog is displayed.
Click the Delete button.
The selected permanent token is deleted and removed from the list.