Skip to main content
GET
Get the current session

Authorizations

Authorization
string
header
required

The session token qumod login obtains through the device flow (POST /v1/auth/device/token). It acts as the signed-in user, like a console session, and needs no CSRF token.

Response

The current session.

user
object
required
token
string
required

Always empty; the session credential is never returned in a body.

Example:

""

organization_id
string
required

The user's primary organization. Empty for a platform administrator with no organization.

Example:

"3f8c2a1e-7b4d-4e9a-9c61-2d5e8f0a1b7c"

organization_name
string
required

The primary organization's name. Empty when organization_id is.

Example:

"Acme Streaming"

role
string
required

The user's role in the primary organization.

Example:

"roles/organization.admin"

expires_at
string<date-time>
required
Example:

"2026-11-10T09:12:44Z"

totp_enabled
boolean
required

Whether two-factor authentication is on.

Example:

true

platform_admin
boolean
required

Whether the user is a platform administrator.

Example:

false

onboarding_required
boolean
required

True until the user completes onboarding (POST /v1/users/me/onboarding).

Example:

false

managed_by
object

The organization that manages the account: the one that has claimed (verified) the domain of its email, in any claimed state. Present only for a managed account. A session request of a managed user who holds no membership is refused with 403, and the error body carries managed_by too.