latestOpenAPI 3.1.02026-08-20118232229.3 KB

0e42b0fb26d9

Describe whoami

Returns an RS256-signed identity JWT for the authenticated user. The token's signature can be verified using the public keys served at /.well-known/jwks.json. Intended for downstream consumers (e.g. Convex) that need a verifiable user identity.

get/whoami

Response

OK

$schemastring uri

A URL to the JSON Schema for this object.

expires_atstring date-time required

Absolute time at which the token expires.

tokenstring required

RS256-signed identity JWT scoped to the authenticated user. Verify against the public keys at /.well-known/jwks.json.

Example response

{
  "$schema": "https://api.tower.dev/v1/schemas/DescribeWhoamiResponse.json"
}