Happklaar API
string · required
GET /v1/auth/sessions — list the calling user's web sessions
GET
https://api.happklaar.nl/v1
/auth/sessions
Returns a DataCollection<WebSessionData> —
the laravel-data Responsable wrapping serialises as
{data: [...]} per config/data.php:wrap.
is_current is true for the row matching session()->getId().
Cookie lane only — bearer-lane (PAT) callers won't have a web
session, so is_current is false for every row in that case.
GET /v1/auth/sessions — list the calling user's web sessions › Responses
No data returned
DELETE /v1/auth/sessions/{session} — revoke one web-session row
DELETE
https://api.happklaar.nl/v1
/auth/sessions/{session}
T-11-02 mitigation lives inside the handler:
- 409 (cannot-revoke-current-session) when target == current.
- 404 (session-not-found) when row absent OR owned by another user (D-13 never-leak-existence).
Route binds {session} as the wildcard parameter name (not id)
because Sanctum binds {id} to PATs elsewhere.
path Parameters
sessionDELETE /v1/auth/sessions/{session} — revoke one web-session row › Responses
No Content
No data returned