Skip to content

Who this bearer is

GET
/auth/me
curl --request GET \
--url https://api.sloose.com/auth/me \
--header 'Authorization: Bearer <token>'

The org, the user and the role behind the bearer, plus whether the org has a stored Zoho connection. via says whether you authenticated with a session token or an org API token — the same route answers both, which is what makes a token a drop-in for a session.

The identity behind the bearer.

Media typeapplication/json
object
org
required
object
id
required
string
name
required
string
dc
required
string
connected
required

Whether the org has granted offline scope for server-side discovery.

boolean
connectionHealth
required
string | null
user
required
object
id
required
string
email
required
string
displayName
required
string | null
role
required
string
Allowed values: owner admin builder operator
via
required
string
Allowed values: session token
exp
required

Expiry, seconds since the epoch.

number
Example
{
"role": "owner",
"via": "session"
}

The session is unknown, expired or no longer a membership (code: AUTH_REQUIRED). An API token that was revoked or expired says so (code: TOKEN_REVOKED, TOKEN_EXPIRED); one whose org has been deleted answers ORG_NOT_FOUND; one whose member or user row has gone answers MEMBERSHIP_GONE.

Media typeapplication/json

The error envelope every non-2xx answer uses.

object
error
required

Human-readable explanation.

string
code

Machine-readable reason. Absent on a few legacy 400s.

string
key
additional properties
Examplegenerated
{
"error": "example",
"code": "example"
}

An administrator has revoked your access to the org (code: ACCESS_REVOKED).

Media typeapplication/json

The error envelope every non-2xx answer uses.

object
error
required

Human-readable explanation.

string
code

Machine-readable reason. Absent on a few legacy 400s.

string
key
additional properties
Examplegenerated
{
"error": "example",
"code": "example"
}