API ReferenceGeneratedAuth

List your own sign-in methods

The methods linked to the CALLER's account, unioning the password on the account row with the federated/passwordless identities. Scoped to the caller from the verified session, never from a payload.

GET
/{appUid}/auth/identities

Authorization

bearerAuth
AuthorizationBearer <token>

Authorization for API

In: header

Path Parameters

appUid*string

Your app's unique id. Find it in the console under the app's Settings, or in the URL of any app page.

Formatuuid

Response Body

application/json

application/json

application/json

curl -X GET "https://example.com/497f6eca-6276-4993-bfeb-53cbbbba6f08/auth/identities"
{  "methods": [    {      "kind": "string",      "identityUid": "string",      "methodId": "string",      "enabled": true,      "createdAt": "string"    }  ]}

List available sign-in methods

Which doors THIS deployment offers (password, magic link, email OTP, and the configured OAuth providers), plus whether each one may create an account. Unauthenticated so a sign-in page can render before anyone signs in. Describes configuration only — never anything about a particular account, which is what would enable enumeration.

List where you are signed in

The caller's live sessions: the session making the request first (marked `current: true`), then newest sign-in first. `total` counts every live session, for paging. `label` is a coarse device description ("Chrome on macOS"); the raw user agent is not returned.