Check authentication

Verify a JWT token and retrieve the authenticated user’s profile.

GET /auth/isloggedin

Check authentication

cURL

curl --request GET \
  --url https://api.example.com/auth/isloggedin \
  --header 'x-access'\''courser-auth-token: <x-access'\''courser-auth-token>'

200

{
  "user": {
    "_id": "<string>",
    "email": "<string>",
    "name": "<string>",
    "courses": [
      "<string>"
    ]
  }
}

Verifies the provided JWT token and returns the authenticated user’s profile from the database. Use this endpoint to confirm a token is still valid and to retrieve up-to-date user data.

This endpoint requires authentication. Include your token in the x-access'courser-auth-token header.

Request headers

x-access'courser-auth-token · string · required

A valid JWT token obtained from any auth endpoint. Note the apostrophe in the header name.

Response

200 — Authenticated

user · object · required

The authenticated user’s full profile document.

Show user properties

_id · string · required

The user’s internal ID. Derived by SHA-256 hashing the Firebase UID and taking the first 24 hex characters.

email · string · required

The user’s email address.

name · string · required

The user’s display name.

courses · string[] · required

Array of MongoDB ObjectIDs referencing the courses owned by this user. Empty array if the user has no courses.

401 — Unauthorized

Returned as a JSON string (not an object) in one of the following cases:

Response body	Cause
"not-logged-in"	The x-access'courser-auth-token header is absent
"no user found"	Token is valid but no matching user exists in the database
"ERROR"	Token verification failed (invalid signature or expired)

Example

cURL

curl --request GET \
  --url http://localhost:8000/auth/isloggedin \
  --header "x-access'courser-auth-token: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9..."

200

{
  "user": {
    "_id": "a3f8c1e09b2d7f4e6a1c3d5b",
    "email": "[e-mail]",
    "name": "Dr. Jane Smith",
    "courses": [
      "64b1f2e3c4a5d6f7e8a9b0c1",
      "64b1f2e3c4a5d6f7e8a9b0c2"
    ]
  }
}

401

"not-logged-in"