Session Tokens

Issue a Session token

Issues a Session token for one of your Profiles, using your API Key secret.

This endpoint supports authenticating existing Profiles, as well as creating new Profiles on the fly.

Note that the Session tokens are subject to a rate limit of 10 active sessions per hour and 20 active sessions per day. It's a good practice to revoke old session tokens when a user logs out of your application.

See the Authentication guides for more information.

post/v1/users/sessions

Request

  • Base URL: https://auth.quiltt.io
  • URL: https://auth.quiltt.io/v1/users/sessions
  • Auth: HTTP bearer

Request body

OR

Example request

{
  "userId": "p_1hyoxpVVFib1HngGwKAzIr",
  "email": "name@example.com",
  "phone": "+14155552671",
  "name": "Quiltty",
  "names": {
    "full": "Quiltty McQuilttface",
    "first": "Quiltty",
    "last": "McQuilttface"
  },
  "dateOfBirth": "1991-10-29",
  "address": {
    "line1": "1412 Main St",
    "line2": "Suite 100",
    "city": "Dallas",
    "region": "Texas",
    "regionCode": "TX",
    "postalCode": "75202",
    "countryCode": "USA",
    "country": "United States of America"
  },
  "metadata": {
    "firebaseId": "4Wz7x0QkPdNNzgRgjZ4iIzMKjXo2",
    "avatar": "https://www.gravatar.com/avatar/5658ffccee7f0ebfda2b226238b1eb6e",
    "favoriteColor": "Purple"
  }
}

Response

Created

tokenstring jwt required

A Session token to access the GraphQL API or load the Quiltt SDK.

userIdstring global_id-v1 required

The ID of the Profile.

userUuidstring uuid required

The UUID of the Profile.

environmentIdstring global_id-v1 required

The ID of the Environment.

expirationnumber required

The UTC date and time when the User Session will expire, in UNIX format.

expiresAtstring date-time required

The UTC date and time when the User Session will expire, in ISO 8601 format.

Example response

{
  "token": "eyJhbGciOiJIUzUxMiJ9.eyJuYmYiOjE2NjIxNDQzODksImlhdCI6MTY2MjE0NDM4OSwianRpIjoiNTEwZjMzMjMtNjJlYi00ZGQxLTlmYTEtNzZiMGQyZDY4NTRjIiwiaXNzIjoiYXV0aC5xdWlsdHQuaW8iLCJhdWQiOiJhcGkucXVpbHR0LmlvIiwiZXhwIjoxNjYyMjMwNzg5LCJ2ZXIiOjJ9.E-h10LPOAaaA4xs2txGl8BGERe1aUcpjCUwX8MXXstXXiBUFZBjQh1PYPdPVdhUv9mcht__2ICq4yS2w6mWPJQ",
  "userId": "p_1hyoxpVVFib1HngGwKAzIr",
  "userUuid": "174ec567-2492-4498-a706-504a79437235",
  "expiration": 1662230789,
  "expiresAt": "2025-09-20T20:33:23Z"
}

Changes

No recorded changes to this operation across all 1 revision of this API.