Sign in
Maintenance

List active HTTP sessions

Returns every active HTTP session tracked by SessionMonitor. Real session ids are never exposed; each entry instead carries a short HMAC-derived token that must be passed back to DELETE /v1/maintenance/_sessions/{token} to invalidate the session. The CSRF secret used to derive these tokens is stored in the caller's HTTP session and is valid for 15 minutes — re-call this endpoint to refresh.

get/api/v1/maintenance/_sessions

Response

List of active sessions

i18nMessagesMapobject
permissionsstring[]

Example response

{
  "entity": [
    {
      "token": "a1b2c3d4e5f6g7h8",
      "userId": "dotcms.org.1",
      "userEmail": "admin@dotcms.com",
      "userFullName": "Admin User",
      "address": "192.168.1.100",
      "sessionTime": "2 hours ago",
      "isCurrent": true
    }
  ]
}

Changes

No recorded changes to this endpoint across all 1 revision of this API.