View .md

Sessions endpoints (Client API: account)

3 FeatherPanel Client API: account endpoints from user/sessions.php: methods, paths, auth, permissions, rate limits, parameters and responses.

Last synced from FeatherPanel 15b94e9 on .

On this page

Defined in backend/app/routes/user/sessions.php. Authentication used here: Signed-in user. Read Authentication for how to send credentials and Rate limits and errors for the response envelope.

Paths, methods, permissions and rate limits come from the route file. Summaries, parameters and response codes come from the OpenAPI annotations on the controllers; endpoints without annotations show only what the route file declares.

Endpoints

GET/api/user/sessions

Auth: Signed-in userDefault rate limit: 60 / minute (user-session)Route name: user-sessions-listController: SessionsController::indexroute source

List active sessions

curl -X GET "$PANEL_URL/api/user/sessions" \
  -H "Authorization: Bearer $FEATHERPANEL_API_KEY" \
  -H "Accept: application/json"

Responses: 200 Active sessions

POST/api/user/sessions/revoke-others

Auth: Signed-in userDefault rate limit: 10 / minute (user-session)Route name: user-sessions-revoke-othersController: SessionsController::revokeOthersroute source

Sign out every other session

curl -X POST "$PANEL_URL/api/user/sessions/revoke-others" \
  -H "Authorization: Bearer $FEATHERPANEL_API_KEY" \
  -H "Accept: application/json"

Responses: 200 Other sessions revoked

DELETE/api/user/sessions/{id}

Auth: Signed-in userDefault rate limit: 30 / minute (user-session)Route name: user-sessions-revokeController: SessionsController::revokeroute source

Sign out one session

ParameterInTypeRequiredDescription
idpathintegeryes
curl -X DELETE "$PANEL_URL/api/user/sessions/$ID" \
  -H "Authorization: Bearer $FEATHERPANEL_API_KEY" \
  -H "Accept: application/json"

Responses: 200 Session revoked