Verify the current session and rotate it when due
GET/api/v1/session
Supply exactly one credential source: the session cookie or an opaque bearer token. Rotation preserves the response shape and may include a replacement Set-Cookie header.
Responses
- 200
- 401
- 421
- 503
The session is valid
The opaque credential is absent, ambiguous, malformed, expired, revoked, or invalid
The Host authority is not allowed by the loopback deployment profile
A required core dependency is unavailable; retry with bounded backoff