v1
latestOpenAPI 3.0.3Apache 2.02026-07-173769114.2 KBpublic
Check Who the Current HTTP Session Belongs To
Uses the HTTP Headers in the GET request to determine (e.g. by using checking the cookies) who is authenticated. Returns a session object in the body or 401 if the credentials are invalid or no credentials were sent. Additionally when the request it successful it adds the user ID to the 'X-Kratos-Authenticated-Identity-Id' header in the response.
This endpoint is useful for reverse proxies and API Gateways.
get/sessions/whoami
Query parameters
Authorizationstring
in: authorization
Headers
Cookiestring
Response
session