Get current authenticated user

Developing

GET

/auth/me

Retrieves the profile and authentication-related information of the currently authenticated user based on the provided access token or authenticated session.

This endpoint is commonly used to:

Validate whether the current access token is still valid.

Restore authenticated user state on the client.

Retrieve user account information after login or page refresh.

Determine account status, roles, permissions, and verification state.

The endpoint returns only the authenticated user's data and does not require a user ID in the request path.

Request

Authorization

JWT Bearer

Add the parameter

Authorization

to Headers

Example:

Authorization: ********************

Cookie Params

Responses

🟢200Success

application/json

Bodyapplication/json

🟠401Token Missing

🟠401Invalid Token

🟠401Token Expired

🟠403Account Soft Deleted

🟠403Account Deactivated

🟠403Account Locked

🟠403Account Not Verified

🟠401Session Not Found

🟠401Session Revoked

🟠401Session Expired

🟠429Rate Limit Exceeded

🔴500Internal Server Error

Request Example

Shell

JavaScript

Java

Swift

curl --location 'http://localhost:3000/api/v1/auth/me' \
--header 'Authorization: Bearer <token>' \
--header 'Cookie: rt='

Response Example

200 - Example

{
    "status": "success",
    "message": "User is authenticated.",
    "data": {
        "user": {
            "id": "88542a0119c79d1844c5e18c8343e6308e1a9a24",
            "name": "Douglas Gibson",
            "email": "henderson36@yahoo.com",
            "profile_picture": "https://avatars.githubusercontent.com/u/24369214",
            "account_status": "active",
            "email_verified": true,
            "email_verified_at": "2026-05-17T23:44:54.282Z",
            "last_login_geolocation": {
                "country_code": "UG",
                "country": "French Southern Territories",
                "region": "Shanyland",
                "city": "Sipesview",
                "latitude": 24.2266,
                "longitude": -61.4589,
                "timezone": "Asia/Shanghai"
            },
            "created_at": "2026-05-17T23:44:54.286Z",
            "updated_at": "2026-05-17T23:44:54.286Z",
            "deleted_at": null
        }
    }
}

Modified at 2026-07-18 11:16:56

Refresh access token

OAuth authentication