Skip to main content

Verify the current session and rotate it when due

GET 

/api/v1/session

Supply exactly one credential source: the session cookie or an opaque bearer token. Rotation preserves the response shape and may include a replacement Set-Cookie header.

Responses​

The session is valid

Response Headers
    Cache-Control

    Always no-store

    Set-Cookie

    Optional rotated opaque session cookie

    X-Request-Id

    Opaque request correlation identifier. ProblemDetails.requestId carries the same value on JSON failures.