What is DescribeDelegationToken?
Lists active delegation tokens, optionally filtered by owner. Operators use this to find tokens that weren't properly revoked after jobs completed and to verify expiry times.
Wire Diagram
Response Header · flexible
message_size
int32 · 4B
correlation_id
int32 · 4B
tagged
var
DescribeDelegationTokenResponse v2
ErrorCode
int16 · 2B
ThrottleTimeMs
int32 · 4B
tagged
var
PrincipalType
string (compact)
PrincipalName
string (compact)
IssueTimestamp
int64 · 8B
ExpiryTimestamp
int64 · 8B
MaxTimestamp
int64 · 8B
TokenId
string (compact)
Hmac
bytes (compact)
tagged
var
PrincipalType
string (compact)
PrincipalName
string (compact)
tagged
var
Schema & Example
Schema { "ErrorCode": int16, "Tokens": [{ "PrincipalType": string, "PrincipalName": string, "IssueTimestamp": int64, "ExpiryTimestamp": int64, "MaxTimestamp": int64, "TokenId": string, "Hmac": bytes, "Renewers": [{ "PrincipalType": string, "PrincipalName": string }] }], "ThrottleTimeMs": int32 }
Example { "ErrorCode": 0, "Tokens": [{ "PrincipalType": "User:alice", "PrincipalName": "User:alice", "IssueTimestamp": 0, "ExpiryTimestamp": 0, "MaxTimestamp": 0, "TokenId": "abc-123", "Hmac": "<binary>", "Renewers": [{ "PrincipalType": "User:alice", "PrincipalName": "User:alice" }] }], "ThrottleTimeMs": 0 }