API ReferenceAuth

Who you are

The account and active org this access token belongs to, verified against its live session. A server that keeps a user's session in a cookie asks here before it trusts who the user is.

GET
/{appUid}/auth/me

Authorization

bearerAuth
AuthorizationBearer <token>

Authorization for API

In: header

Path Parameters

appUid*string

Your app's unique id. Find it in the console under the app's Settings, or in the URL of any app page.

Formatuuid

Response Body

application/json

application/json

application/json

curl -X GET "https://example.com/497f6eca-6276-4993-bfeb-53cbbbba6f08/auth/me"
{  "user": {    "uid": "07cc67f4-45d6-494b-adac-09b5cbc7e2b5",    "email": "string",    "fname": "string",    "lname": "string",    "emailVerified": true  },  "activeOrgUid": "string",  "org": {    "uid": "string",    "name": "string"  }}

Delete your account

Erases the account: its personal details, every way in, its memberships and grants. An org it was the only member of is deleted (its rows are kept for the app's owner), and the address can sign up again. Needs a `reverifyToken` from POST /auth/reverify.

Confirm it is you

Proves it is still the account holder with exactly one of a password, a two-step code, or an emailed code (`requestId` + `code`). Answers a receipt for one sensitive change, valid ten minutes, for this session only.