---
title: "🔒 Получение списка всех активных и неактивных сессий пользователя."
method: GET
path: "/session/list"
tags: ["Auth"]
---

# 🔒 Получение списка всех активных и неактивных сессий пользователя.

`GET /session/list`

## Request

- Base URL: `http://localhost`
- URL: `http://localhost/session/list`
- Auth: one of:
  - API key in header `sid` and API key in header `rts` and API key in header `sig`
  - HTTP bearer

Получение списка всех активных и неактивных сессий пользователя.

**Access:** `authorized` (10 ) · **allowNullCompany:** true · **Scope:** `read`

**Allows:** `user:sessions` (все обязательны; ресурс — `<тип>ID` / `ID` из запроса, `user:*` — `userID` или сам пользователь)

### TypeScript (copy-paste)

**`GET /session/list`**

<details open><summary><b>Params</b></summary>

```typescript
export interface SessionListParams {
  userID: string
}
```

</details>

<details open><summary><b>Response</b></summary>

```typescript
export type SessionListResponse = IServerResponse<Resp_session_list>

export interface IServerResponse<T = any> {
  code: number
  data: T
  srvTS: number
  rkey: string
}
```

</details>

> Полный файл типов: [`/docs/types`](/docs/types) · raw: [`/docs/api-types.ts`](/docs/api-types.ts)

## Query parameters

- `userID` string, uuid, required

## Headers

- `devID` string, uuid, required
- `tz` string, required
- `app` string, required
- `appVer` string, required
- `rKey` string

## Response `200`

OK — `IServerResponse<Resp_session_list>`

- object
  - `code` integer, required
  - `data` RespSessionList, required: ResponseData for session/list
    - `list` object[], required: #26809 `parentID` - у дочерних handoff-сессий: веб показывает их внутри родителя
      - `ID` string, uuid, required
      - `parentID` string, uuid, required
      - `expTs` unknown, required
      - `createTs` unknown, required
      - `lastActiveTs` unknown, required
      - `ip` unknown, required
      - `country` unknown, required
      - `city` unknown, required
      - `device` unknown, required
  - `srvTS` integer, required: Server timestamp (ms)
  - `rkey` string, required: Request key

## Other responses

- `400`: BadRequest / Validation — неверные params/body/headers
- `401`: Unauthorized: Active user session required
- `403`: AccessNotAllowed: Non-admin user attempted to list active sessions of another user
- `406`: TimeResync — расхождение rts с сервером

---

[API](https://skmtc.dev/kosmodrom/apis/kosmodrom-backend-api.md) · [All operations](https://skmtc.dev/kosmodrom/apis/kosmodrom-backend-api/llms.txt) · [OpenAPI document](https://skmtc.dev/kosmodrom/apis/kosmodrom-backend-api/revisions/a143b51ba29a?raw)