query_token

Query token by value. It expects a GET request.

Schema: URL/tokens/query_token

Params

• value: A string containing the token value to look up.

Response

• success: True or False.

• token: Token data or null if token not exists.

• message: On failure the error message is returned.

add_token

add_token is for generating a new token. It expects a POST request.

Schema: URL/tokens/add_token

Params

• value: A string containing the token value. If empty, the token uuid gets used as value.

• valid_from: A datetime in isoformat. If empty, token has no effective date.

• valid_to: A datetime in isoformat. If empty, token has no expiration date.

• usage_count: An integer defining how often the token can be consumed. If -1, token can be consumed unlimited times.

• lock_time: Time in seconds the token is locked after consumption as integer.

Response

• success: True or False.

• token_uid: On success the token uid is returned.

• message: On failure the error message is returned.

consume_token

consume_token is for consuming a token. It expects a GET request.

Schema: URL/tokens/<UUID>/consume_token

Params

• No parametes expected.

Response

• success: True or False.

• consumed: On success flag whether token consumption was valid.

• message: On failure the error message is returned.

update_token

edit_token is for editing a token. It expects a POST request.

Schema: URL/tokens/<UUID>/update_token

Params

• value: A string containing the token value. If empty, the token uuid gets used as value. Unchanged if parameter is omitted.

• valid_from: A datetime in isoformat. If empty, token has no effective date. Unchanged if parameter is omitted.

• valid_to: A datetime in isoformat. If empty, token has no expiration date. Unchanged if parameter is omitted.

• usage_count: An integer defining how often the token can be consumed. If -1, token can be consumed unlimited times. Unchanged if parameter is omitted.

• lock_time: Time in seconds the token is locked after consumption as integer. Unchanged if parameter is omitted.

Response

• success: True or False.

• message: On failure the error message is returned.

delete_token

delete_token is for deleting a token. It expects a POST request.

Schema: URL/tokens/<UUID>/delete_token

Params

• No parametes expected.

Response

• success: True or False.

• message: On failure the error message is returned.

2.0.0 (2026-10-24)

• Render TokenSettingsForm in a card with the title of the settings node as card header, like the settings forms of cone.ugm. [rnix]

• TokenForm.timerange_extractor skips an empty valid_to by value. It checked for UNSET, but yafowil.widget.datetime extracts an empty value as None, so the guard never applied. [rnix]

• Modernise the code ruff flags as outdated: class X(object). Remove unused import. Behaviour unchanged. super(Class, self) is kept, see cone.app. [rnix]

• Pin the ruff rule selection in pyproject.toml. Remove qa.isort domain from Makefile, make check runs ruff check only, like in the other cone.* packages. [rnix]

• Pin setuptools<82.0.0 in mx.ini. pyramid 2.0.2 still imports pkg_resources, which setuptools 82 removed. [rnix]

• Boostrap 5 styles.

1.1.0 (2026-02-03)

• Refactor package layout to use pyproject.toml and implicit namespace packages. [rnix]

0.5 (2024-05-23)

• Update Makefile. [rnix]

• properties and metadata of cone.tokens.model.Tokens are instance properties now. [rnix]

• Use ts.http_request instead of ts.ajax.request. [rnix]

0.4 (2024-02-12)

• Adopt Settings UI changes from cone.app. [rnix]

0.3 (2023-09-28)

• Tokens can be bulk deleted. [lenadax]

• Tokens can be created from scanned value. [rnix]

0.2 (2023-09-27)

• Actually upload package to pypi. [rnix]

0.1 (2023-09-27)

• Initial work. [rnix, toalba, lenadax]