---
title: "Get the authenticated user"
method: GET
path: "/v1/user"
tags: ["User"]
---

# Get the authenticated user

`GET /v1/user`

Returns the caller's own identity, read from the verified access-token claims. Profile fields (email, name, country) appear only when the token carries them.

## Response `200`

The caller's identity claims.

- object
  - `sub` string, required — The token subject (the JWT `sub`): the user's email, which auth.wego.com uses as the stable user identifier.
  - `scope` string — Space-separated OAuth scopes granted to the token.
  - `email` string — The user's email address, when the token carries it.
  - `name` string — The user's full display name, when present.
  - `first_name` string — The user's given name, when present.
  - `last_name` string — The user's family name, when present.
  - `country_code` string — The user's market country code, when present (id_token-sourced; usually absent on the access token).
  - `uid` union — The AS's own numeric user id. Published as `string | number` because that is what it is: it arrives as a number today, and a `string`-only declaration would be a promise the API does not keep.
    - string
    - number
  - `principal_name` string — The auth server's principal name for the user, when present.

## Other responses

- `401` — Missing or invalid bearer token.
- `429` — Rate limit exceeded; retry after the `Retry-After` seconds.

---

[API](https://skmtc.net/wego/apis/wego-api.md) · [All operations](https://skmtc.net/wego/apis/wego-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/wego/wego-api/revisions/e5d7af502419/schema)