Sign in

v1

latestOpenAPI 3.0.3AGPL-3.0-or-later2026-07-2687268192.4 KB
Session Management

Validate a session

Validate a session using a cookie header or an authorization header. This is a passive check that does not update the session's internal last activity timestamp.

get/sessions/validate

Response

Session validation response

is_validboolean

Indicates whether the session is valid or not

expiration_timestring date-time

Date-time indicating the expiration of the session. Deprecated, please use claims.expiration instead.

user_idstring uuid4

The ID of the user the session is associated with. Deprecated, please use claims.subject instead.

idle_expires_atstring date-time

Timestamp (in UTC) indicating when the session will expire due to inactivity, assuming no further activity occurs before this time. Only present when idle timeout is configured. The value is capped to the JWT expiration time.

Example response

{
  "claims": {
    "subject": "c339547d-e17d-4ba7-8a1d-b3d5a4d17c1c",
    "session_id": "c339547d-e17d-4ba7-8a1d-b3d5a4d17c1c"
  }
}