> Documentation index: [Saleor](/llms.txt) · [This section](/api-reference/authentication/llms.txt)
> Source: https://docs.saleor.io/api-reference/authentication/objects/external-obtain-access-tokens

# ExternalObtainAccessTokens Object

Obtain external access tokens for user by custom plugin.

```graphql
type ExternalObtainAccessTokens {
  token: String
  refreshToken: String
  csrfToken: String
  user: User
  accountErrors: [AccountError!]! @deprecated
  errors: [AccountError!]!
}
```

<a id="fields"></a>

### Fields

<a id="token"></a>

#### [`token`](#token) ● [`String`](/api-reference/miscellaneous/scalars/string.md)

The token, required to authenticate.

<a id="refresh-token"></a>

#### [`refreshToken`](#refresh-token) ● [`String`](/api-reference/miscellaneous/scalars/string.md)

The refresh token, required to re-generate external access token.

<a id="csrf-token"></a>

#### [`csrfToken`](#csrf-token) ● [`String`](/api-reference/miscellaneous/scalars/string.md)

CSRF token required to re-generate external access token.

<a id="user"></a>

#### [`user`](#user) ● [`User`](/api-reference/users/objects/user.md)

A user instance.

<a id="errors"></a>

#### [`errors`](#errors) ● [`[AccountError!]!`](/api-reference/users/objects/account-error.md)

Show deprecatedHide deprecated

<a id="account-errors"></a>

#### [`accountErrors`](#account-errors) ● [`[AccountError!]!`](/api-reference/users/objects/account-error.md)

DEPRECATED

Use `errors` field instead.

<a id="returned-by"></a>

### Returned By

[`externalObtainAccessTokens`](/api-reference/authentication/mutations/external-obtain-access-tokens.md) mutation