Sign in
sessions

Validate session

Validate a session for a given access token. This will ensure both that the token signature is valid and that the token has not been revoked.

post/sessions/validate

Request body

accessTokenstring required

The access token to be validated.

clientIdsstring[]

A list of IDs of the app clients for which the access token is valid. If provided, the access token must be issued for one of these clients.

Response

OK

userobject required

A JSON object containing user claims.

expiresAtnumber required

The token expiry as a Unix timestamp in seconds.

verificationMethod'SMS' | 'AUTHENTICATOR_APP' | 'EMAIL_MAGIC_LINK' | 'EMAIL_OTP' | 'PUSH' | 'DEVICE' | 'SECURITY_KEY' | 'PASSKEY' | 'VERIFF' | 'IPROOV' | 'PALM_BIOMETRICS_RR' | 'IDVERSE'

Changes