v1

latestOpenAPI 3.0.3Apache 2.02026-07-173769114.2 KB
public

Check Who the Current HTTP Session Belongs To

Uses the HTTP Headers in the GET request to determine (e.g. by using checking the cookies) who is authenticated. Returns a session object in the body or 401 if the credentials are invalid or no credentials were sent. Additionally when the request it successful it adds the user ID to the 'X-Kratos-Authenticated-Identity-Id' header in the response.

This endpoint is useful for reverse proxies and API Gateways.

get/sessions/whoami

Query parameters

Authorizationstring

in: authorization

Headers

Cookiestring

Response

session

activeboolean
authenticated_atstring date-time required
expires_atstring date-time required
idstring uuid4 required
issued_atstring date-time required