Get session

Return the authenticated principal and which credential authenticated it. Works with either an API key or a session cookie, a convenient first call to verify integration credentials.

GET /auth/session

Get session

cURL

curl --request GET \
  --url https://aropay.aro.media/api/v1/auth/session \
  --header 'Authorization: Bearer <token>'

200

{
  "ok": true,
  "data": {
    "user": {
      "id": "ckusr0001abcd",
      "email": "[e-mail]",
      "name": "Ada Lovelace",
      "company": "Example Corp",
      "mustChangePassword": false,
      "totpEnabled": true,
      "lastLoginAt": "2026-08-13T09:00:00.000Z",
      "createdAt": "2026-06-01T12:00:00.000Z"
    },
    "authMethod": "api_key"
  }
}

Authorizations

apiKeyAuthsessionCookie

Authorization · string · header · default: aro_sk_your_key_here · required

AroPay API key, sent as Authorization: Bearer aro_sk_…. Created in the dashboard under Settings → API keys. Takes precedence over a session cookie when both are present.

Response

200

application/json

Current principal.

ok · any · required

data · object · required

Show child attributes