GET /api/users/{userId}/sessions/{sessionId}
O auth2

Retrieve a non-expired session for the user by session ID, including session metadata and interaction details when available.

Path parameters

  • userId string Required

    The unique identifier of the user.

  • sessionId string Required

    The unique identifier of the session.

Responses

  • 200 application/json

    Return a non-expired session of the user.

    Hide response attributes Show response attributes object
    • payload object Required
      Hide payload attributes Show payload attributes object
      • exp number Required
      • iat number Required
      • jti string Required
      • uid string Required
      • kind string("Session") Required
      • loginTs number Required
      • accountId string Required
      • authorizations object Required
        Hide authorizations attribute Show authorizations attribute object
        • * object Additional properties
          Hide * attributes Show * attributes object
          • sid string
          • grantId string
          • persistsLogout boolean
    • lastSubmission object | null Required
      Hide lastSubmission attributes Show lastSubmission attributes object | null
      • interactionEvent string Required

        Values are SignIn, Register, or ForgotPassword.

      • userId string Required
      • verificationRecords array[object] Required
        One of:
        object-1 object object-2 object object-3 object object-4 object object-5 object object-6 object object-7 object object-8 object object-9 object object-10 object object-11 object
      • signInContext object
        Hide signInContext attribute Show signInContext attribute object
        • * string Additional properties
    • clientId string | null Required
    • accountId string | null Required
    • expiresAt number Required
  • 400

    Bad Request

  • 401

    Unauthorized

  • 403

    Forbidden

  • 404

    Not Found

  • 500

    Internal Server Error

GET /api/users/{userId}/sessions/{sessionId} 
curl \
 --request GET 'https://[tenant_id].logto.app/api/users/{userId}/sessions/{sessionId}' \
 --header "Authorization: Bearer $ACCESS_TOKEN"
Response examples (200) 
{
  "payload": {
    "exp": 42.0,
    "iat": 42.0,
    "jti": "string",
    "uid": "string",
    "kind": "string",
    "loginTs": 42.0,
    "accountId": "string",
    "authorizations": {
      "additionalProperty1": {
        "sid": "string",
        "grantId": "string",
        "persistsLogout": true
      },
      "additionalProperty2": {
        "sid": "string",
        "grantId": "string",
        "persistsLogout": true
      }
    }
  },
  "lastSubmission": {
    "interactionEvent": "SignIn",
    "userId": "string",
    "verificationRecords": [
      {
        "id": "string",
        "type": "string",
        "identifier": {
          "type": "username",
          "value": "string"
        },
        "verified": true
      }
    ],
    "signInContext": {
      "additionalProperty1": "string",
      "additionalProperty2": "string"
    }
  },
  "clientId": "string",
  "accountId": "string",
  "expiresAt": 42.0
}