The current browser session
Answers 401 when there is no valid session cookie; the UI then shows the login page.
openapi/harthelm.yaml at v1.5.0__Host-harthelm_session<token>Browser session of the UI (12 h idle, 7 days absolute). State-changing requests also need the header
Harthelm-CSRF: 1 and a matching Origin.
The session and its user.
application/json- response
user*break_glass*booleanThe session belongs to the break-glass administrator; the UI shows a red banner.
created_at*stringdate-timeexpires_at*stringAbsolute end of the session (7 days after sign-in).
date-timeidle_expires_at*stringEnd of the session without activity (12 h after the last request).
date-timecurl -X GET 'https://console.example.com/api/v1/auth/session'{ "user": { "id": 1, "email": "string", "name": "string", "is_cluster_admin": true, "email_verified": true, "picture_url": "string", "issuer": "string" }, "break_glass": true, "created_at": "2019-08-24T14:15:22Z", "expires_at": "2019-08-24T14:15:22Z", "idle_expires_at": "2019-08-24T14:15:22Z"}How to sign in
What the login page offers. Works without credentials.
Break-glass sign-in
Signs in the break-glass administrator with the username and password from the configured Secret, independent of the OIDC issuer. Rate-limited and audit-logged; the resulting session carries `break_glass: true`, which the UI shows as a red banner. Answers 404 when break-glass is disabled.