com.atproto.server.createSession

atproto-lexicons.bsky.social

{
  "$type": "com.atproto.lexicon.schema",
  "defs": {
    "main": {
      "description": "Create an authentication session.",
      "errors": [
        {
          "name": "AccountTakedown"
        },
        {
          "name": "AuthFactorTokenRequired"
        }
      ],
      "input": {
        "encoding": "application/json",
        "schema": {
          "properties": {
            "allowTakendown": {
              "description": "When true, instead of throwing error for takendown accounts, a valid response with a narrow scoped token will be returned",
              "type": "boolean"
            },
            "authFactorToken": {
              "type": "string"
            },
            "identifier": {
              "description": "Handle or other identifier supported by the server for the authenticating user.",
              "type": "string"
            },
            "password": {
              "type": "string"
            }
          },
          "required": [
            "identifier",
            "password"
          ],
          "type": "object"
        }
      },
      "output": {
        "encoding": "application/json",
        "schema": {
          "properties": {
            "accessJwt": {
              "type": "string"
            },
            "active": {
              "type": "boolean"
            },
            "did": {
              "format": "did",
              "type": "string"
            },
            "didDoc": {
              "type": "unknown"
            },
            "email": {
              "type": "string"
            },
            "emailAuthFactor": {
              "type": "boolean"
            },
            "emailConfirmed": {
              "type": "boolean"
            },
            "handle": {
              "format": "handle",
              "type": "string"
            },
            "refreshJwt": {
              "type": "string"
            },
            "status": {
              "description": "If active=false, this optional field indicates a possible reason for why the account is not active. If active=false and no status is supplied, then the host makes no claim for why the repository is no longer being hosted.",
              "knownValues": [
                "takendown",
                "suspended",
                "deactivated"
              ],
              "type": "string"
            }
          },
          "required": [
            "accessJwt",
            "refreshJwt",
            "handle",
            "did"
          ],
          "type": "object"
        }
      },
      "type": "procedure"
    }
  },
  "id": "com.atproto.server.createSession",
  "lexicon": 1
}

Validate Record

Validate a record against com.atproto.server.createSession

Validation Options
Treat any remaining unresolved references as valid

Metadata

DID
did:plc:6msi3pj7krzih5qxqtryxlzw
CID
bafyreieftxrfcsudzvfk5l73r2cukzwa6axzkfjs2l7dxtieyqnkdngwsq
Indexed At
2026-02-18 18:59 UTC
AT-URI
at://did:plc:6msi3pj7krzih5qxqtryxlzw/com.atproto.lexicon.schema/com.atproto.server.createSession

Similar Lexicons

Lexicons whose schemas describe something close to this one. Check them before publishing a new one that overlaps.

  • Refresh an authentication session. Requires auth using the 'refreshJwt' (not the 'accessJwt').

  • Get information about the current auth session. Requires auth.

  • The lxm named in service-auth JWTs minted for the BlueHarbor backend (aud did:web:blueharbor.at). The backend verifies the JWT against the caller's DID document and exchanges it for a BlueHarbor session token. Defined h…

Lexicon Garden

@