Hmm, I think I figured it out. https://www.ory.sh/docs/kratos/reference/api#tag/frontend/operation/toSession You'd just call the /sessions/whoami from the backend while including the cookie in your headers.