Skip to main content
GET
Get current session

Authorizations

Authorization
string
header
required

JWT bearer token issued by the identity provider.

Response

OK

authMode
enum<string>
required

Whether this deployment enforces authentication. 'disabled' carries no session: subject and permissions are null.

Available options:
enabled,
disabled
Example:

"enabled"

permissions
string[] | null
required

Effective permissions as 'resource:action', sorted. Null when the grant is UNKNOWN — the token carries no RBAC claims, or every role name it carries is unknown to this service — in which case server-side authorization remains the only gate. An empty array is a known grant of nothing.

Example:
subject
string | null
required

Validated subject of the bearer token, for display only. Null when auth is disabled.

Example:

"lerian/6f2b1c2e"