What is DescribeDelegationToken?
Lists active delegation tokens, optionally filtered by owner. Operators use this to find tokens that weren't properly revoked after jobs completed and to verify expiry times.
Wire Diagram
Response Header
message_size
int32 · 4B
correlation_id
int32 · 4B
DescribeDelegationTokenResponse v1
ErrorCode
int16 · 2B
ThrottleTimeMs
int32 · 4B
PrincipalType
string
PrincipalName
string
IssueTimestamp
int64 · 8B
ExpiryTimestamp
int64 · 8B
MaxTimestamp
int64 · 8B
TokenId
string
Hmac
bytes
PrincipalType
string
PrincipalName
string
Schema & Example
Schema { "ErrorCode": int16, "Tokens": [{ "PrincipalType": string, "PrincipalName": string, "IssueTimestamp": int64, "ExpiryTimestamp": int64, "MaxTimestamp": int64, "TokenId": string, "Hmac": bytes, "Renewers": [{ "PrincipalType": string, "PrincipalName": string }] }], "ThrottleTimeMs": int32 }
Example { "ErrorCode": 0, "Tokens": [{ "PrincipalType": "User:alice", "PrincipalName": "User:alice", "IssueTimestamp": 0, "ExpiryTimestamp": 0, "MaxTimestamp": 0, "TokenId": "abc-123", "Hmac": "<binary>", "Renewers": [{ "PrincipalType": "User:alice", "PrincipalName": "User:alice" }] }], "ThrottleTimeMs": 0 }