--- title: "Changes to Check Who the Current HTTP Session Belongs To" method: GET path: "/sessions/whoami" --- # Changes to Check Who the Current HTTP Session Belongs To `GET /sessions/whoami` > Every recorded change to this operation, newest first. ## Timeline Changed in 16 of 47 revisions. - **2025-11-07** `5f08e5827b5e`: 1 breaking, 3 warning, 2 info - **2025-02-25** `df2fe8db7397`: 1 warning - **2024-06-05** `344e70f3542d`: 2 warning - **2024-02-20** `4f071812f3ea`: 1 breaking, 6 warning, 4 info - **2023-08-31** `d10e7b267596`: 1 info - **2022-12-02** `b6e5ffa30d4c`: 7 breaking, 1 warning, 4 info - **2022-06-01** `fca041c7721f`: 1 warning, 2 info - **2022-03-22** `028a4cf83c15`: 3 warning, 2 info - **2021-12-17** `b793191830a4`: 1 warning - **2021-10-28** `c55ed8ad9f0c`: 3 warning, 7 info - **2021-07-22** `071bec03ddcd`: 2 breaking, 2 warning - **2021-07-13** `8f1b399ab6e6`: 3 breaking, 7 info - **2021-05-18** `9123bcead5ed`: 1 breaking, 2 warning, 14 info - **2021-05-11** `0b5d5b421f15`: 1 warning - **2021-05-10** `8b8f8cf57b16`: 1 info - **2021-05-05** `381c760af46e`: 7 breaking, 20 warning, 15 info ## Changes - **2025-11-07** `5f08e5827b5e`: 1 breaking, 3 warning, 2 info - the response property `identity/recovery_addresses/items/id` became optional for the status `200` - added the new `passkey` enum value to the `authentication_methods/items/method` response property for the response status `200` - added the new `profile` enum value to the `authentication_methods/items/method` response property for the response status `200` - added the new `saml` enum value to the `authentication_methods/items/method` response property for the response status `200` - added the optional property `identity/external_id` to the response with the `200` status - removed the `v0.6_legacy_session` enum value from the `authentication_methods/items/method` response property for the response status `200` - **2025-02-25** `df2fe8db7397`: 1 warning - added the new `saml` enum value to the `identity/credentials/additionalProperties/type` response property for the response status `200` - **2024-06-05** `344e70f3542d`: 2 warning - added the new `passkey` enum value to the `identity/credentials/additionalProperties/type` response property for the response status `200` - added the new `profile` enum value to the `identity/credentials/additionalProperties/type` response property for the response status `200` - **2024-02-20** `4f071812f3ea`: 1 breaking, 6 warning, 4 info - the response property `identity` became optional for the status `200` - added the new `code` enum value to the `authentication_methods/items/method` response property for the response status `200` - added the new `code` enum value to the `identity/credentials/additionalProperties/type` response property for the response status `200` - added the new `code_recovery` enum value to the `identity/credentials/additionalProperties/type` response property for the response status `200` - added the new `email` enum value to the `identity/verifiable_addresses/items/via` response property for the response status `200` - added the new `link_recovery` enum value to the `identity/credentials/additionalProperties/type` response property for the response status `200` - added the new `sms` enum value to the `identity/verifiable_addresses/items/via` response property for the response status `200` - added the new optional `query` request parameter `tokenize_as` - added the optional property `authentication_methods/items/organization` to the response with the `200` status - added the optional property `identity/organization_id` to the response with the `200` status - added the optional property `tokenized` to the response with the `200` status - **2023-08-31** `d10e7b267596`: 1 info - added the optional property `authentication_methods/items/provider` to the response with the `200` status - **2022-12-02** `b6e5ffa30d4c`: 7 breaking, 1 warning, 4 info - the response property `identity/metadata_admin` became nullable for the status `200` - the response property `identity/metadata_public` became nullable for the status `200` - the response property `identity/verifiable_addresses/items/id` became optional for the status `200` - the `id` response's property format changed from `uuid4` to `uuid` for status `200` - the `identity/id` response's property format changed from `uuid4` to `uuid` for status `200` - the `identity/recovery_addresses/items/id` response's property format changed from `uuid4` to `uuid` for status `200` - the `identity/verifiable_addresses/items/id` response's property format changed from `uuid4` to `uuid` for status `200` - added the new `code_recovery` enum value to the `authentication_methods/items/method` response property for the response status `200` - api tag `frontend` added - api tag `v0alpha2` removed - removed the non-success response with the status `500` - added the optional property `devices` to the response with the `200` status - **2022-06-01** `fca041c7721f`: 1 warning, 2 info - added the new `v0.6_legacy_session` enum value to the `authentication_methods/items/method` response property for the response status `200` - added the optional property `identity/metadata_admin` to the response with the `200` status - added the optional property `identity/metadata_public` to the response with the `200` status - **2022-03-22** `028a4cf83c15`: 3 warning, 2 info - added the new `lookup_secret` enum value to the `authentication_methods/items/method` response property for the response status `200` - added the new `lookup_secret` enum value to the `identity/credentials/additionalProperties/type` response property for the response status `200` - added the new `webauthn` enum value to the `identity/credentials/additionalProperties/type` response property for the response status `200` - added the optional property `authentication_methods/items/aal` to the response with the `200` status - added the optional property `identity/credentials/additionalProperties/version` to the response with the `200` status - **2021-12-17** `b793191830a4`: 1 warning - added the new `webauthn` enum value to the `authentication_methods/items/method` response property for the response status `200` - **2021-10-28** `c55ed8ad9f0c`: 3 warning, 7 info - added the new `oidc` enum value to the `identity/credentials/additionalProperties/type` response property for the response status `200` - added the new `password` enum value to the `identity/credentials/additionalProperties/type` response property for the response status `200` - added the new `totp` enum value to the `identity/credentials/additionalProperties/type` response property for the response status `200` - api tag `v0alpha2` added - api tag `v0alpha1` removed - added the non-success response with the status `403` - added the optional property `authentication_methods` to the response with the `200` status - added the optional property `authenticator_assurance_level` to the response with the `200` status - added the optional property `error/id` to the response with the `401` status - added the optional property `error/id` to the response with the `500` status - **2021-07-22** `071bec03ddcd`: 2 breaking, 2 warning - the response property `identity/state` became optional for the status `200` - the `identity/state` response's property type changed from no type to `string` for status `200` - added the new `active` enum value to the `identity/state` response property for the response status `200` - added the new `inactive` enum value to the `identity/state` response property for the response status `200` - **2021-07-13** `8f1b399ab6e6`: 3 breaking, 7 info - the response property `authenticated_at` became optional for the status `200` - the response property `expires_at` became optional for the status `200` - the response property `issued_at` became optional for the status `200` - the endpoint scheme security `sessionCookie` was removed from the API - api tag `v0alpha1` added - api tag `public` removed - added the new optional `header` request parameter `Cookie` - added the optional property `identity/credentials` to the response with the `200` status - added the optional property `identity/state_changed_at` to the response with the `200` status - added the required property `identity/state` to the response with the `200` status - **2021-05-18** `9123bcead5ed`: 1 breaking, 2 warning, 14 info - the `identity/traits` response's property type changed from `object` to no type for status `200` - deleted the `header` request parameter `Authorization` - deleted the `header` request parameter `Cookie` - api operation id `whoami` removed and replaced with `toSession` - the endpoint scheme security `sessionCookie` was added to the API - the endpoint scheme security `sessionToken` was removed from the API - added the new optional `header` request parameter `X-Session-Token` - added the optional property `identity/created_at` to the response with the `200` status - added the optional property `identity/recovery_addresses/items/created_at` to the response with the `200` status - added the optional property `identity/recovery_addresses/items/updated_at` to the response with the `200` status - added the optional property `identity/updated_at` to the response with the `200` status - added the optional property `identity/verifiable_addresses/items/created_at` to the response with the `200` status - added the optional property `identity/verifiable_addresses/items/updated_at` to the response with the `200` status - the response property `error` became required for the status `401` - the response property `error` became required for the status `500` - the response property `error/message` became required for the status `401` - the response property `error/message` became required for the status `500` - **2021-05-11** `0b5d5b421f15`: 1 warning - removed the optional property `identity/test` from the response with the `200` status - **2021-05-10** `8b8f8cf57b16`: 1 info - added the optional property `identity/test` to the response with the `200` status - **2021-05-05** `381c760af46e`: 7 breaking, 20 warning, 15 info - the response property `error` became optional for the status `401` - the response property `error/message` became optional for the status `401` - the `id` response's property format changed from `uuid` to `uuid4` for status `200` - the `identity/id` response's property format changed from `uuid` to `uuid4` for status `200` - the `identity/recovery_addresses/items/id` response's property format changed from `uuid` to `uuid4` for status `200` - the `identity/traits` response's property type changed from no type to `object` for status `200` - the `identity/verifiable_addresses/items/id` response's property format changed from `uuid` to `uuid4` for status `200` - deleted the `header` request parameter `X-Session-Token` - deleted the `query` request parameter `tokenize_as` - removed the optional property `authentication_methods` from the response with the `200` status - removed the optional property `authenticator_assurance_level` from the response with the `200` status - removed the optional property `devices` from the response with the `200` status - removed the optional property `error/id` from the response with the `401` status - removed the optional property `identity/created_at` from the response with the `200` status - removed the optional property `identity/credentials` from the response with the `200` status - removed the optional property `identity/external_id` from the response with the `200` status - removed the optional property `identity/metadata_admin` from the response with the `200` status - removed the optional property `identity/metadata_public` from the response with the `200` status - removed the optional property `identity/organization_id` from the response with the `200` status - removed the optional property `identity/recovery_addresses/items/created_at` from the response with the `200` status - removed the optional property `identity/recovery_addresses/items/updated_at` from the response with the `200` status - removed the optional property `identity/state` from the response with the `200` status - removed the optional property `identity/state_changed_at` from the response with the `200` status - removed the optional property `identity/updated_at` from the response with the `200` status - removed the optional property `identity/verifiable_addresses/items/created_at` from the response with the `200` status - removed the optional property `identity/verifiable_addresses/items/updated_at` from the response with the `200` status - removed the optional property `tokenized` from the response with the `200` status - api operation id `toSession` removed and replaced with `whoami` - the endpoint scheme security `sessionToken` was added to the API - api tag `public` added - api tag `frontend` removed - added the new optional `header` request parameter `Authorization` - added the non-success response with the status `500` - removed the non-success response with the status `403` - the response property `authenticated_at` became required for the status `200` - the response property `expires_at` became required for the status `200` - the response property `identity` became required for the status `200` - the response property `identity/recovery_addresses/items/id` became required for the status `200` - the response property `identity/verifiable_addresses/items/id` became required for the status `200` - the response property `issued_at` became required for the status `200` - …2 more --- [Operation](https://skmtc.dev/ory/apis/ory-identities-api/docs/sessions/whoami/get.md) - [API](https://skmtc.dev/ory/apis/ory-identities-api.md) - [Page](https://skmtc.dev/ory/apis/ory-identities-api/changes/sessions/whoami/get)