---
title: "Look up an active user from session data"
method: POST
path: "/auth/from-session"
tags: ["Auth"]
---

# Look up an active user from session data

`POST /auth/from-session`

Look up an active user from session data. This can be used to help with seamless SSO with XF, assuming the session or remember cookies are available to your page. At least one of session_id and remember_cookie must be provided. Only available to super user keys.

## Response `200`

OK

- object
  - `success` boolean — If false, no session or remember cookie could be found
  - `user` User — Information about the user. Different information will be included based on permissions and verbosity.
    - `about` string
    - `activity_visible` boolean
    - `age` integer — The user's current age. Only included if available.
    - `alert_optout` unknown[]
      - unknown
    - `allow_post_profile` string
    - `allow_receive_news_feed` string
    - `allow_send_personal_conversation` string
    - `allow_view_identities` string
    - `allow_view_profile` string
    - `avatar_urls` object — Maps from size types to URL.
    - `profile_banner_urls` object — Maps from size types to URL.
    - `can_ban` boolean
    - `can_converse` boolean
    - `can_edit` boolean
    - `can_follow` boolean
    - `can_ignore` boolean
    - `can_post_profile` boolean
    - `can_view_profile` boolean
    - `can_view_profile_posts` boolean
    - `can_warn` boolean
    - `content_show_signature` boolean
    - `creation_watch_state` string
    - `custom_fields` object — Map of custom field keys and values.
    - `custom_title` string — Will have a value if a custom title has been specifically set; prefer user_title instead.
    - `dob` object — Date of birth with year, month and day keys.
    - `email` string
    - `email_on_conversation` boolean
    - `gravatar` string
    - `interaction_watch_state` boolean
    - `is_admin` boolean
    - `is_banned` boolean
    - `is_discouraged` boolean
    - `is_followed` boolean — True if the visitor is following this user. Only included if visitor is not a guest.
    - `is_ignored` boolean — True if the visitor is ignoring this user. Only included if visitor is not a guest.
    - `is_moderator` boolean
    - `is_super_admin` boolean
    - `last_activity` integer — Unix timestamp of user's last activity, if available.
    - `location` string
    - `push_on_conversation` boolean
    - `push_optout` unknown[]
      - unknown
    - `receive_admin_email` boolean
    - `secondary_group_ids` unknown[]
      - unknown
    - `show_dob_date` boolean
    - `show_dob_year` boolean
    - `signature` string
    - `timezone` string
    - `use_tfa` boolean
    - `user_group_id` integer
    - `user_state` string
    - `user_title` string
    - `visible` boolean
    - `warning_points` integer — Current warning points.
    - `website` string
    - `view_url` string
    - `user_id` integer
    - `username` string
    - `message_count` integer
    - `question_solution_count` integer
    - `register_date` integer
    - `trophy_points` integer
    - `is_staff` boolean
    - `reaction_score` integer
    - `vote_score` integer

## Other responses

- `default` — Error

---

[API](https://skmtc.net/xenforo-ltd/apis/xenforo-api.md) · [All operations](https://skmtc.net/xenforo-ltd/apis/xenforo-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/xenforo-ltd/xenforo-api/revisions/b15eba33657a/schema)