API Reference
Getting Started
Core Concepts
Backend API — Guides
Frontend API — Guides
OAuth & OpenID Connect — Guides
Enterprise: SSO & SCIM — Guides
Webhooks — Guides
SDKs
Backend API (BAPI)
Frontend API (FAPI)
Dashboard API
Public API
SCIM
OIDC
Platform

Client Sessions

AdminUpdated Sep 11, 2026

Client Sessions

Frontend API — publishable key (x-publishable-key) plus the user session.

6 routes. Each row is one endpoint with its explanation and whether it honours the Idempotency-Key header.

Method & path

Idem

Explanation

GET /v1/client/sessions

List the signed-in user's own active sessions/devices, flagging the current one.

POST /v1/client/sessions/revoke_all

Sign out of every other device. Spares the current session; bumps sessions_version.

POST /v1/client/sessions/:id/touch

Switch the active organization. Membership is resolved server-side.

POST /v1/client/sessions/:id/tokens

Rotate the refresh token and mint a session JWT. Reads the refresh cookie only.

POST /v1/client/sessions/:id/revoke

Revoke one session and clear its cookies.

POST /v1/client/sessions/:id/tokens/:template

Mint a short-lived JWT for the active session using a named JWT template (getToken).

Was this page helpful?