Skip to main content
GET
Get Current Session

Authorizations

Authorization
string
header
required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Response

200 - application/json

Successful Response

Authz primitives for the current session, surfaced to the frontend.

Lightweight pass-through of JWT claims relevant to client-side gating (entitlements + role + permissions). Cached aggressively in the FE. Display data lives on /me, not here.

role
string
required
roles
string[]
required
permissions
string[]
required
featureFlags
string[]
required