com.atproto.server.getSession

atproto-lexicons.bsky.social

{
  "$type": "com.atproto.lexicon.schema",
  "defs": {
    "main": {
      "description": "Get information about the current auth session. Requires auth.",
      "output": {
        "encoding": "application/json",
        "schema": {
          "properties": {
            "active": {
              "type": "boolean"
            },
            "did": {
              "format": "did",
              "type": "string"
            },
            "didDoc": {
              "type": "unknown"
            },
            "email": {
              "type": "string"
            },
            "emailAuthFactor": {
              "type": "boolean"
            },
            "emailConfirmed": {
              "type": "boolean"
            },
            "handle": {
              "format": "handle",
              "type": "string"
            },
            "status": {
              "description": "If active=false, this optional field indicates a possible reason for why the account is not active. If active=false and no status is supplied, then the host makes no claim for why the repository is no longer being hosted.",
              "knownValues": [
                "takendown",
                "suspended",
                "deactivated"
              ],
              "type": "string"
            }
          },
          "required": [
            "handle",
            "did"
          ],
          "type": "object"
        }
      },
      "type": "query"
    }
  },
  "id": "com.atproto.server.getSession",
  "lexicon": 1
}

Validate Record

Validate a record against com.atproto.server.getSession

Validation Options
Treat any remaining unresolved references as valid

Metadata

DID
did:plc:6msi3pj7krzih5qxqtryxlzw
CID
bafyreihjh3lkkbdznrs5jfnt6mhxtnaitviqqma6zmoltt3weknwxlc5ae
Indexed At
2026-02-18 19:00 UTC
AT-URI
at://did:plc:6msi3pj7krzih5qxqtryxlzw/com.atproto.lexicon.schema/com.atproto.server.getSession

Similar Lexicons

Lexicons whose schemas describe something close to this one. Check them before publishing a new one that overlaps.

  • Refresh an authentication session. Requires auth using the 'refreshJwt' (not the 'accessJwt').

  • Create an authentication session.

  • Get the hosting status for a repository, on this server. Expected to be implemented by PDS and Relay.

  • Who the caller is signed in as. The session cookie carries an opaque id and nothing else (ADR 0034 §2), so this is how a client learns its own DID — it cannot read one out of the cookie, by design. Answers 200 with `…

  • Returns the status of an account, especially as pertaining to import or recovery. Can be called many times over the course of an account migration. Requires auth and can only be called pertaining to oneself.

Lexicon Garden

@