Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

is there a non admin endpoint exposed via the sdk to list a users session? I think I only found the one in `IdentityApi` but it is `/admin/sessions`?

You mean toSession?
<https://www.ory.sh/docs/reference/api#tag/frontend/operation/toSession>

yes similar to that, but I want all sessions of an identity so they can disconnect one if they think.

before I used:
```this.fetchGet(`${this.config.kratosUrl}/sessions`)```
but mixing the ory sdk and my own fetch calls made for really messy code. as exceptions are different all over the place.

typo'd my question, "a user's sessions" :smile: subtle

also, is it safe to assume that everything in `IdentityApi` is `/admin` and requires a PAT?

<@U011D3UQKNY> — looking for this, but through the SDK
<https://www.ory.sh/docs/reference/api#tag/frontend/operation/listMySessions>

Also for a delete op:
<https://www.ory.sh/docs/reference/api#tag/frontend/operation/disableMySession>

Hello <@U03PPHZL3MK>

listIdentitySessions?
<https://github.com/ory/sdk/blob/9e5041034de610cda93f5f9e1aea375799b6b0f1/clients/kratos/typescript/api.ts#L7309>

and
deleteIdentitySessions
<https://github.com/ory/sdk/blob/9e5041034de610cda93f5f9e1aea375799b6b0f1/clients/kratos/typescript/api.ts#L6661>

but that requires a PAT and should be done server side, right?

i can't do it client side like `GET /sessions`

I think I found it
listMySessions
<https://github.com/ory/sdk/blob/9e5041034de610cda93f5f9e1aea375799b6b0f1/clients/kratos/typescript/api.ts#L4433>