UserSession
A session of the account. It is created at sign-in, on passing the 2FA, or on a password change, and each one records where it was opened from and how long it is good for.
Properties
| Field | Type | Description |
|---|---|---|
id* | string (uuid) | Unique session identifier (UUID v7, time-ordered). It is the value `DELETE /v1/users/me/sessions/{id}` consumes. |
is_current* | boolean | `true` when this session is the one making the request. |
ip* | string | null | IP address the session was opened from. `null` when it did not reach the server at that moment. |
user_agent* | string | null | `User-Agent` header captured when the session was opened, which is where the "browser · system" label shown by the interface comes from. `null` when the client did not send it. |
created_at* | string (date-time) | Date and time when the session was opened, in ISO 8601 UTC. It matches the sign-in, two-factor authentication (2FA) or password change that created it. |
last_used_at* | string (date-time) | Date and time of the last authenticated request that used this session, in ISO 8601 UTC. It is updated on every request and is what orders the list. |
expires_at* | string (date-time) | Date and time when the session expires on its own, in ISO 8601 UTC. It is 4 hours from when it was opened, or 24 when sign-in asked to remember the device. Past that instant the session is rejected with `session_expired`. |
Used in operations
GET /v1/users/me/sessions