Check Session | Auth API Reference

This endpoint replaces login on subsequent launches. Store the token after the first login and call session to restore the user context without credentials.

POST /api/vaneltonid/session.php

Requires Authorization: AppID:AppKey header

Request body

Field	Type	Required	Description
token	string	required	Session token saved from a previous `login` call
masterkey	string	optional	Device key used during login (defaults to `"master"`). Must match the key used when the token was created.

Test this endpoint

Headers

Authorization *

Body

token *

masterkey

Success response 200

Same structure as the Login response. The token in the response is the same token you sent.

{
  "vaneltonid": {
    "logged": 1,
    "id": 42,
    "userkey": "abc123...",
    "email": "user@email.com",
    "username": "vanelton",
    "name": "Vanelton",
    "profileimg": "https://...",
    "idverify": 1,
    "vaneltonpass": false,
    "roles": "[developer]",
    "token": "SESSION_TOKEN_HERE",
    "itemKeys": ["key1", "key2"]
  },
  "app": {
    "authorized": 1,
    "packageid": "com.myapp.game",
    "appname": "My App",
    "appversion": "1.0.0"
  }
}

Errors

Code	Message	Cause
400	Missing required parameter 'token'.	Body sent without `token`
401	Authorization header with appid:appkey is required.	Missing or malformed header
401	Invalid or expired token.	Token doesn't exist or was overwritten
401	Invalid master key associated with the token.	masterkey doesn't match the one used at login
404	User not found for the provided token.	Account was deleted