POST
/clients/verifyVerify a client
Verifies a client by validating the JWT supplied in the request body. Send the token for the active client to retrieve the associated client and session details.
- IdempotentThe SDK sends
Idempotency-Key, so a retried request is only applied once.
Client verification input containing the JWT to validate.
tokenstringrequired
A JWT that represents the active client.
200Returns the verified client object, including its session IDs, session details, sign-in and sign-up IDs, last authentication strategy, and timestamps.
objectstringrequired
String representing the object's type. Objects of the same type share the same value.
idstringrequired
String representing the identifier of the session.
session_idsarray<string>required
sessionsarray<object>required
sign_in_idstringrequired
sign_up_idstringrequired
last_active_session_idstringrequired
Last active session_id.
last_authentication_strategystringrequired
The authentication strategy that was last used to authenticate the user on this client.
updated_atintegerrequired
Unix timestamp of last update.
created_atintegerrequired
Unix timestamp of creation.
400Returned when the request is not successful.
errorsarray<object>required
metaobjectoptional
clerk_trace_idstringoptional
401Returned when authentication is invalid.
errorsarray<object>required
metaobjectoptional
clerk_trace_idstringoptional
404Returned when the referenced resource is not found.
errorsarray<object>required
metaobjectoptional
clerk_trace_idstringoptional
Error handling
The request body must include token, a JWT representing the active client; an invalid request returns a 400. An invalid authentication credential returns a 401, and a 404 is returned when the referenced resource is not found.