Resolve the session cookie to a user

Reads the convex-auth-access-token cookie, verifies the JWT, and checks the session row (revocation, expiry). Always 200 — an unauthenticated request returns null fields rather than an error.

GET/api/auth/session

Responses

200

Current session state.

userUser | nullrequired

Show properties

One of:

User

idstring

emailstring<email>

namestring

imagestring

emailVerifiedboolean

null

null

sessionIdstring | nullrequired

Show properties

One of:

string

string

null

null

Try it

Server

Base URLCustom base URLOverrides the selected server when set.

Request

curl -X GET 'https://your-deployment.convex.site/api/auth/session'

const response = await fetch("https://your-deployment.convex.site/api/auth/session", {
  method: "GET"
});

import requests

response = requests.get(
    "https://your-deployment.convex.site/api/auth/session",
)

Response

{
  "user": {
    "id": "string",
    "email": "user@example.com",
    "name": "string",
    "image": "string",
    "emailVerified": true
  },
  "sessionId": "string"
}