# Get Session Info
## Endpoint
`/api/user/session/get`
## Method
GET
## Description
Returns the same info as that of the `login` or the `createToken` calls for the session specified by the token. Useful for retrieving server info, user details, and permissions for an existing session.
## Parameters
| `token` | string | Yes | - | The session token generated by the `login` or the `createToken` call. |
## Authentication
Requires a valid token (session token from login or API token from createToken).
## Response Fields
| `displayName` | string | The display name of the user account. |
| `username` | string | The username of the authenticated user. |
| `totpEnabled` | boolean | Whether 2FA is enabled on this account. |
| `token` | string | The session token (same as the one provided in the request). |
| `info` | object | Server info and permissions object. |
| `info.version` | string | DNS server software version. |
| `info.uptimestamp` | string | ISO 8601 timestamp of when the DNS server started. |
| `info.dnsServerDomain` | string | The DNS server domain name. |
| `info.clusterInitialized` | boolean | Whether the DNS server cluster has been initialized. |
| `info.clusterDomain` | string | The cluster domain name (present when cluster is initialized). |
| `info.defaultRecordTtl` | integer | Default TTL for DNS records. |
| `info.useSoaSerialDateScheme` | boolean | Whether the SOA serial date scheme is in use. |
| `info.dnssecValidation` | boolean | Whether DNSSEC validation is enabled. |
| `info.permissions` | object | Map of permission sections (Dashboard, Zones, Cache, Allowed, Blocked, Apps, DnsClient, Settings, DhcpServer, Administration, Logs) each with `canView`, `canModify`, `canDelete` booleans. |
## Conditional Logic Notes
- Unlike the `login` endpoint, this always returns the full `info` object (no `includeInfo` toggle).
- The response includes additional fields not present in the login response: `uptimestamp`, `clusterInitialized`, `clusterDomain`, `useSoaSerialDateScheme`, `dnssecValidation`.
## Edge Cases
- The `info` object returned here contains more fields than the login response's `info` object (e.g., `uptimestamp`, `clusterInitialized`, `clusterDomain`, `useSoaSerialDateScheme`, `dnssecValidation`).
- The `clusterDomain` field may only be present when `clusterInitialized` is `true`.
- The response mirrors login/createToken structure but the `info` block is always included.