# DOH

## Get your Zero Trust organization DoH settings

`zero_trust.organizations.doh.get(DOHGetParams**kwargs)  -> DOHGetResponse`

**get** `/accounts/{account_id}/access/organizations/doh`

Returns the DoH settings for your Zero Trust organization.

### Parameters

- `account_id: str`

  Identifier.

### Returns

- `class DOHGetResponse: …`

  - `id: Optional[str]`

    The ID of the service token.

  - `client_id: Optional[str]`

    The Client ID for the service token. Access will check for this value in the `CF-Access-Client-ID` request header.

  - `doh_jwt_duration: Optional[str]`

    The duration the DoH JWT is valid for. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h.  Note that the maximum duration for this setting is the same as the key rotation period on the account.

  - `duration: Optional[str]`

    The duration for how long the service token will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. The default is 1 year in hours (8760h).

  - `expires_at: Optional[datetime]`

  - `name: Optional[str]`

    The name of the service token.

### Example

```python
import os
from cloudflare import Cloudflare

client = Cloudflare(
    api_token=os.environ.get("CLOUDFLARE_API_TOKEN"),  # This is the default and can be omitted
)
doh = client.zero_trust.organizations.doh.get(
    account_id="023e105f4ecef8ad9ca31a8372d0c353",
)
print(doh.id)
```

#### Response

```json
{
  "errors": [
    {
      "code": 1000,
      "message": "message",
      "documentation_url": "documentation_url",
      "source": {
        "pointer": "pointer"
      }
    }
  ],
  "messages": [
    {
      "code": 1000,
      "message": "message",
      "documentation_url": "documentation_url",
      "source": {
        "pointer": "pointer"
      }
    }
  ],
  "success": true,
  "result": {
    "id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "client_id": "88bf3b6d86161464f6509f7219099e57.access.example.com",
    "created_at": "2014-01-01T05:20:00.12345Z",
    "doh_jwt_duration": "800h",
    "duration": "60m",
    "expires_at": "2014-01-01T05:20:00.12345Z",
    "last_seen_at": "2014-01-01T05:20:00.12345Z",
    "name": "CI/CD token",
    "updated_at": "2014-01-01T05:20:00.12345Z"
  }
}
```

## Update your Zero Trust organization DoH settings

`zero_trust.organizations.doh.update(DOHUpdateParams**kwargs)  -> DOHUpdateResponse`

**put** `/accounts/{account_id}/access/organizations/doh`

Updates the DoH settings for your Zero Trust organization.

### Parameters

- `account_id: str`

  Identifier.

- `doh_jwt_duration: Optional[str]`

  The duration the DoH JWT is valid for. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h.  Note that the maximum duration for this setting is the same as the key rotation period on the account. Default expiration is 24h

- `service_token_id: Optional[str]`

  The uuid of the service token you want to use for DoH authentication

### Returns

- `class DOHUpdateResponse: …`

  - `id: Optional[str]`

    The ID of the service token.

  - `client_id: Optional[str]`

    The Client ID for the service token. Access will check for this value in the `CF-Access-Client-ID` request header.

  - `doh_jwt_duration: Optional[str]`

    The duration the DoH JWT is valid for. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h.  Note that the maximum duration for this setting is the same as the key rotation period on the account. Default expiration is 24h

  - `duration: Optional[str]`

    The duration for how long the service token will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. The default is 1 year in hours (8760h).

  - `expires_at: Optional[datetime]`

  - `name: Optional[str]`

    The name of the service token.

### Example

```python
import os
from cloudflare import Cloudflare

client = Cloudflare(
    api_token=os.environ.get("CLOUDFLARE_API_TOKEN"),  # This is the default and can be omitted
)
doh = client.zero_trust.organizations.doh.update(
    account_id="023e105f4ecef8ad9ca31a8372d0c353",
)
print(doh.id)
```

#### Response

```json
{
  "errors": [
    {
      "code": 1000,
      "message": "message",
      "documentation_url": "documentation_url",
      "source": {
        "pointer": "pointer"
      }
    }
  ],
  "messages": [
    {
      "code": 1000,
      "message": "message",
      "documentation_url": "documentation_url",
      "source": {
        "pointer": "pointer"
      }
    }
  ],
  "success": true,
  "result": {
    "id": "f174e90a-fafe-4643-bbbc-4a0ed4fc8415",
    "client_id": "88bf3b6d86161464f6509f7219099e57.access.example.com",
    "created_at": "2014-01-01T05:20:00.12345Z",
    "doh_jwt_duration": "800h",
    "duration": "60m",
    "expires_at": "2014-01-01T05:20:00.12345Z",
    "last_seen_at": "2014-01-01T05:20:00.12345Z",
    "name": "CI/CD token",
    "updated_at": "2014-01-01T05:20:00.12345Z"
  }
}
```

## Domain Types

### DOH Get Response

- `class DOHGetResponse: …`

  - `id: Optional[str]`

    The ID of the service token.

  - `client_id: Optional[str]`

    The Client ID for the service token. Access will check for this value in the `CF-Access-Client-ID` request header.

  - `doh_jwt_duration: Optional[str]`

    The duration the DoH JWT is valid for. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h.  Note that the maximum duration for this setting is the same as the key rotation period on the account.

  - `duration: Optional[str]`

    The duration for how long the service token will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. The default is 1 year in hours (8760h).

  - `expires_at: Optional[datetime]`

  - `name: Optional[str]`

    The name of the service token.

### DOH Update Response

- `class DOHUpdateResponse: …`

  - `id: Optional[str]`

    The ID of the service token.

  - `client_id: Optional[str]`

    The Client ID for the service token. Access will check for this value in the `CF-Access-Client-ID` request header.

  - `doh_jwt_duration: Optional[str]`

    The duration the DoH JWT is valid for. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h.  Note that the maximum duration for this setting is the same as the key rotation period on the account. Default expiration is 24h

  - `duration: Optional[str]`

    The duration for how long the service token will be valid. Must be in the format `300ms` or `2h45m`. Valid time units are: ns, us (or µs), ms, s, m, h. The default is 1 year in hours (8760h).

  - `expires_at: Optional[datetime]`

  - `name: Optional[str]`

    The name of the service token.