List your own sessions and tokens

GET

/auth/me/sessions

const url = 'https://example.com/api/v1/auth/me/sessions';
const options = {method: 'GET'};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}

curl --request GET \
  --url https://example.com/api/v1/auth/me/sessions

Lists the caller’s own active bearer credentials (time-bounded web-login sessions and CLI/API tokens) with their non-secret metadata; the current one is flagged. Requires authentication; self-scoped (never another principal’s). The token secret is never returned.

Responses

200

application/json

object

$schema

A URL to the JSON Schema for this object.

string format: uri

sessions

required

Array<object> | null

object

client_ip

The IP address the credential was created from

string

created_at

required

When the credential was issued (RFC 3339)

string

current

required

True for the credential that authenticated this request; revoking it signs out the current session

boolean

description

What a token is for (a token carries a description; a session does not)

string

expires_at

When the credential expires (RFC 3339); every credential is now time-bounded

string

required

string

kind

required

Session for a web login, token for a CLI/API credential (omniglass token)

string

Allowed values: session token

last_used_at

When the credential last authenticated a request (RFC 3339), throttled to the minute

string

prefix

required

The non-secret ogp locator, so a credential is recognizable without exposing the token

string

user_agent

The User-Agent that created the credential, so the console can show a device label

string

Example

{
  "$schema": "/api/v1/schemas/ListMeSessionsOutputBody.json",
  "sessions": [
    {
      "kind": "session"
    }
  ]
}

default

Error

application/problem+json

object

$schema

A URL to the JSON Schema for this object.

string format: uri

detail

A human-readable explanation specific to this occurrence of the problem.

string

errors

Optional list of individual error details

Array<object> | null

object

location

Where the error occurred, e.g. ‘body.items[3].tags’ or ‘path.thing-id’

string

message

Error message text

string

value

The value at the given location

instance

A URI reference that identifies the specific occurrence of the problem.

string format: uri

status

HTTP status code

integer format: int64

title

A short, human-readable summary of the problem type. This value should not change between occurrences of the error.

string

type

A URI reference to human-readable documentation for the error.

string format: uri

default: about:blank

Example

{
  "$schema": "/api/v1/schemas/ErrorModel.json",
  "detail": "Property foo is required but is missing.",
  "instance": "https://example.com/error-log/abc123",
  "status": 400,
  "title": "Bad Request",
  "type": "about:blank"
}