Sign in

v1

latestOpenAPI 3.0.3AGPL-3.0-or-later2026-07-2687268192.4 KB
Session Management

Validate a session

Validate a session using a session token in a request body. This endpoint updates the session's internal last activity timestamp. This extends the idle timeout window if configured).

post/sessions/validate

Request body

session_tokenstring JWT required

The session token (JWT) to validate

Response

Session validation response

is_validboolean

Indicates whether the session is valid or not

expiration_timestring date-time

Date-time indicating the expiration of the session. Deprecated, please use claims.expiration instead.

user_idstring uuid4

The ID of the user the session is associated with. Deprecated, please use claims.subject instead.

idle_expires_atstring date-time

Timestamp (in UTC) indicating when the session will expire due to inactivity, assuming no further activity occurs before this time. Only present when idle timeout is configured. The value is capped to the JWT expiration time.

Example response

{
  "claims": {
    "subject": "c339547d-e17d-4ba7-8a1d-b3d5a4d17c1c",
    "session_id": "c339547d-e17d-4ba7-8a1d-b3d5a4d17c1c"
  }
}