2 files changed, 61 insertions, 0 deletions
diff --git a/src/api/endpoints.ts b/src/api/endpoints.ts
index ad45f42bc7..e4abc06f53 100644
--- a/src/api/endpoints.ts
+++ b/src/api/endpoints.ts
@@ -46,6 +46,7 @@ export default [
 	{ name: 'i/appdata/get',    shouldBeSignin: true },
 	{ name: 'i/appdata/set',    shouldBeSignin: true },
 	{ name: 'i/signin_history', shouldBeSignin: true, kind: 'account-read' },
+	{ name: 'i/authorized_apps', shouldBeSignin: true, secure: true },
 
 	{ name: 'i/notifications',                shouldBeSignin: true, kind: 'notification-read' },
 	{ name: 'notifications/delete',           shouldBeSignin: true, kind: 'notification-write' },
diff --git a/src/api/endpoints/i/authorized_apps.js b/src/api/endpoints/i/authorized_apps.js
new file mode 100644
index 0000000000..17f971af2f
--- /dev/null
+++ b/src/api/endpoints/i/authorized_apps.js
@@ -0,0 +1,60 @@
+'use strict';
+
+/**
+ * Module dependencies
+ */
+import * as mongo from 'mongodb';
+import AccessToken from '../../models/access-token';
+import App from '../../models/app';
+import serialize from '../../serializers/app';
+
+/**
+ * Get authorized apps of my account
+ *
+ * @param {Object} params
+ * @param {Object} user
+ * @return {Promise<object>}
+ */
+module.exports = (params, user) =>
+	new Promise(async (res, rej) =>
+{
+	// Get 'limit' parameter
+	let limit = params.limit;
+	if (limit !== undefined && limit !== null) {
+		limit = parseInt(limit, 10);
+
+		// From 1 to 100
+		if (!(1 <= limit && limit <= 100)) {
+			return rej('invalid limit range');
+		}
+	} else {
+		limit = 10;
+	}
+
+	// Get 'offset' parameter
+	let offset = params.offset;
+	if (offset !== undefined && offset !== null) {
+		offset = parseInt(offset, 10);
+	} else {
+		offset = 0;
+	}
+
+	// Get 'sort' parameter
+	let sort = params.sort || 'desc';
+
+	// Get tokens
+	const tokens = await AccessToken
+		.find({
+			user_id: user._id
+		}, {
+			limit: limit,
+			skip: offset,
+			sort: {
+				_id: sort == 'asc' ? 1 : -1
+			}
+		});
+
+	// Serialize
+	res(await Promise.all(tokens.map(async token =>
+		await serialize(token.app_id))));
+});