app.didpic.identity.getSession

Return the authenticated viewer's identity along with any opaque flags clients may use to gate UI.

Details · query
Kindquery
Authorityidentity.didpic.app
Indexed

Query

query · GET

Output

application/json

avatarCid

string

did

requiredstring · did

envAdmin

requiredboolean

Implementation-defined flag. Clients should treat as opaque.

handle

string · handle

roles

requiredarray

Opaque flags assigned to the viewer. Values are implementation-defined; treat unknown entries as informational.

itemsstring

Similar lexicons

semantic match

Lexicons whose schemas describe something close to this one. Check them before publishing a new one that overlaps.

  • Who the caller is signed in as. The session cookie carries an opaque id and nothing else (ADR 0034 §2), so this is how a client learns its own DID — it cannot read one out of the cookie, by design. Answers 200 with `signedIn: false` rather than 401 for an anonymous caller: not being signed in is an ordinary state of the application, not an error in the request.

  • Describe the signed-in ILLI session: the account behind the illi_session cookie, which app it belongs to, and when the account joined the ILLI service. Served by the ILLI Service Agent Node.

  • Who is asking: by the console's session cookie, or their service auth. Nothing, for no one. As knotless's getViewer, for the console to show who is signed in.

  • Get the authenticated user's lsky-specific state: profile, onboarding status. The user's DID and handle are resolved from the inter-service auth JWT. This is the first call the app should make after login to hydrate lsky user context.

  • Get an actor's profile. Returns full detail — including dashboard entitlements — only for the authenticated caller; for any other actor it returns public basics only.