should switch to consumes/getByToken