API ReferenceAuth

List your sessions

The caller's live sessions: the session making the request first (marked `current: true`), then newest sign-in first. `total` counts every live session, for paging. `label` is a coarse device description ("Chrome on macOS"); the raw user agent is not returned.

GET
/{appUid}/auth/sessions

Authorization

bearerAuth
AuthorizationBearer <token>

Authorization for API

In: header

Path Parameters

appUid*string

Your app's unique id. Find it in the console under the app's Settings, or in the URL of any app page.

Formatuuid

Query Parameters

limit?integer
Range1 <= value <= 100
Default25
offset?integer
Range0 <= value
Default0

Response Body

application/json

application/json

application/json

application/json

curl -X GET "https://example.com/497f6eca-6276-4993-bfeb-53cbbbba6f08/auth/sessions"
{  "total": 0,  "sessions": [    {      "uid": "07cc67f4-45d6-494b-adac-09b5cbc7e2b5",      "label": "string",      "authMethod": "string",      "ip": "string",      "createdAt": "2019-08-24T14:15:22Z",      "lastUsedAt": "2019-08-24T14:15:22Z",      "expiresAt": "2019-08-24T14:15:22Z",      "current": true    }  ]}

Sign out

Ends the session the presented token belongs to: its refresh token and all of its access tokens stop working immediately. Send the refresh token as `refreshToken` in the body (preferred — it works after the access token has expired), or the access token as `Authorization: Bearer <token>`. When a body refresh token is present, the header is ignored. Idempotent: signing out of a session that has already ended returns 200.

Sign out one session

Ends one of the caller's other sessions. A session that is not the caller's answers 404 — the same as one that does not exist. The session making the request is refused with `SESSION_IS_CURRENT`: use sign-out for that.