# Discovery and Access Token

**URL:** <https://forum.collaboraonline.com/t/discovery-and-access-token/495>\
**Category:** Installation & Configuration\
**Created:** [July 26, 2021, 12:37pm UTC](https://forum.collaboraonline.com/t/discovery-and-access-token/495 "2021-07-26T12:37:05Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![mshadi](https://avatars.discourse-cdn.com/v4/letter/m/8dc957/32.png) [@mshadi](https://forum.collaboraonline.com/u/mshadi)\
**Post date:** [July 26, 2021, 12:37pm UTC](https://forum.collaboraonline.com/t/discovery-and-access-token/495/1 "2021-07-26T12:37:05Z")

</div>

In [collabora example](https://github.com/CollaboraOnline/collabora-online-sdk-examples/blob/8ffc7f5cff3becae341d674c6db86d60dacc3eff/webapp/nodejs/routes/index.js#L52), the **access token** is set and returned in **discovery** Api.

It seems discovery should not be called for each file request, as said [here](https://wopi.readthedocs.io/en/latest/discovery.html#action-urls).

Does token also need to be set once with discovery? Should I really set and return token in discovery api? and use it in all following iframe requests.

---

<div class="post-metadata">

**Author:** ![mshadi](https://avatars.discourse-cdn.com/v4/letter/m/8dc957/32.png) [@mshadi](https://forum.collaboraonline.com/u/mshadi)\
**Post date:** [August 1, 2021, 4:52am UTC](https://forum.collaboraonline.com/t/discovery-and-access-token/495/2 "2021-08-01T04:52:18Z")

</div>

hello, Can anybody help?