---
title: "Report user activity, extending the unlock window"
method: POST
path: "/auth/app-lock/touch"
tags: ["auth"]
---

# Report user activity, extending the unlock window

`POST /auth/app-lock/touch`

Sent by the client on genuine interaction, at most once a minute. Not inferred from traffic: the app polls in the background, so an abandoned device would otherwise never lock. Lock-gated, so an expired window can never be revived by one of these.

## Response `204`

Window extended

## Other responses

- `423` — Session is locked

---

[API](https://skmtc.dev/dre/apis/dre-api.md) · [All operations](https://skmtc.dev/dre/apis/dre-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/dre/dre-api/revisions/5d14beb9482b/schema)