Lists the caller's sign-ins, newest first.

GET

/api/v1/sessions

Errors

401 when nothing was signed in, 403 when a bearer token was used or the account still owes a password change.

Authorization

session

cookietessera_session<token>

Set by POST /auth/login. A browser sends it automatically; it is HttpOnly, so page scripts cannot read or set it.

Response Body

The caller's sign-ins

application/json

response

[index: integer]?

One sign-in, as the API describes it.

Covers sessions that are over as well as the ones that work. A person reading this is usually asking whether anyone else has been in, and a session that was revoked last Tuesday is exactly what they need to see.

curl -X GET 'https://example.com/api/v1/sessions'

[  {    "active": true,    "created_at": "string",    "created_ip": "string",    "created_user_agent": "string",    "current": true,    "ended_reason": "string",    "expires_at": "string",    "id": "string",    "last_seen_at": "string"  }]