com.atproto.server.createSession
{
"$type": "com.atproto.lexicon.schema",
"defs": {
"main": {
"description": "Create an authentication session.",
"errors": [
{
"name": "AccountTakedown"
},
{
"name": "AuthFactorTokenRequired"
}
],
"input": {
"encoding": "application/json",
"schema": {
"properties": {
"allowTakendown": {
"description": "When true, instead of throwing error for takendown accounts, a valid response with a narrow scoped token will be returned",
"type": "boolean"
},
"authFactorToken": {
"type": "string"
},
"identifier": {
"description": "Handle or other identifier supported by the server for the authenticating user.",
"type": "string"
},
"password": {
"type": "string"
}
},
"required": [
"identifier",
"password"
],
"type": "object"
}
},
"output": {
"encoding": "application/json",
"schema": {
"properties": {
"accessJwt": {
"type": "string"
},
"active": {
"type": "boolean"
},
"did": {
"format": "did",
"type": "string"
},
"didDoc": {
"type": "unknown"
},
"email": {
"type": "string"
},
"emailAuthFactor": {
"type": "boolean"
},
"emailConfirmed": {
"type": "boolean"
},
"handle": {
"format": "handle",
"type": "string"
},
"refreshJwt": {
"type": "string"
},
"status": {
"description": "If active=false, this optional field indicates a possible reason for why the account is not active. If active=false and no status is supplied, then the host makes no claim for why the repository is no longer being hosted.",
"knownValues": [
"takendown",
"suspended",
"deactivated"
],
"type": "string"
}
},
"required": [
"accessJwt",
"refreshJwt",
"handle",
"did"
],
"type": "object"
}
},
"type": "procedure"
}
},
"id": "com.atproto.server.createSession",
"lexicon": 1
}
Metadata
- DID
-
did:plc:6msi3pj7krzih5qxqtryxlzw - CID
-
bafyreieftxrfcsudzvfk5l73r2cukzwa6axzkfjs2l7dxtieyqnkdngwsq - Indexed At
- 2026-02-18 18:59 UTC
- AT-URI
-
at://did:plc:6msi3pj7krzih5qxqtryxlzw/com.atproto.lexicon.schema/com.atproto.server.createSession
Similar Lexicons
Lexicons whose schemas describe something close to this one. Check them before publishing a new one that overlaps.
-
com.atproto.server.refreshSession procedure
Refresh an authentication session. Requires auth using the 'refreshJwt' (not the 'accessJwt').
-
Get information about the current auth session. Requires auth.
-
at.blueharbor.createSession procedure
The lxm named in service-auth JWTs minted for the BlueHarbor backend (aud did:web:blueharbor.at). The backend verifies the JWT against the caller's DID document and exchanges it for a BlueHarbor session token. Defined h…