Active sessions
Full sessions only. Unrevoked, unexpired refresh-token sessions, newest first.
View as MarkdownAuthorization
bearer In: header
Response Body
application/json
application/json
application/json
application/json
curl -X GET "https://example.com/v1/me/sessions"{ "sessions": [ { "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08", "user_agent": "string", "created_at": "2019-08-24T14:15:22Z", "expires_at": "2019-08-24T14:15:22Z" } ]}Record where the caller's account came from
Full sessions only. The login app posts the first-touch sign-up source once, right after a new account's first session. The first post within a day of the account's creation is kept; later posts and posts for older accounts are ignored. Values that aren't plain campaign tags, known tool names, a hostname or a path are dropped: a referrer is cut to its host and a landing page to the first two segments of its path, so nothing that identifies a person and no capability link is stored. The body is limited to 4 KB.
Revoke a session
Full sessions only. Already-revoked sessions read as not found.