Skip to main content
GET
Get the current session

Response

Current session identity + access expiry; re-seeds the CSRF token

data
object
required

Session identity returned on verify/refresh/session. The access + refresh tokens are set as httpOnly cookies (not in the body); csrf_token is held in memory by the SPA and echoed in the X-CSRF-Token header.