Manage App Users and Sessions

Each app has a user model that represents users that can enroll in the application. Whenever a user object is created, additional metadata is stored to facilitate enrollment and session management.
A single user may have one or more sessions. A session represents a single device that is (or was) signed in.
To allow a user to have more than one session, the "Multiple devices per user" feature flag must be enabled for the application.
Parameters
To retrieve, create, update or delete mobile users, follow the instructions in these sections of the documentation for your mobile user object type (e.g. user):
​Retrieve all Objects​
​Create a New Object​
​Update a Single Object​
​Delete a Single Object​
Deleting the user object will lock the user and wipe all app data from the user's enrolled devices. This operation is irreversible.
Version compatibility
The sync_status field with last_full_sync is only available for devices with version 4.36.0 or greater of the JourneyApps Container.
Before managed runtime versions (i.e. before version 4.70), only the installed container version was reported to the backend. Since version 4.70 the runtime version was reported, though it was still erroneously called the "container version" on the backend. As of version 4.82, both the runtime and container versions are reported correctly to the JourneyApps backend.
User and Sessions API
API
Relative URL
HTTP Request Method
​List all users​
/api/v4/backend-deployment-id/users
GET
​Get user and sessions​
/api/v4/backend-deployment-id/users/user-id
GET
​Get single session​
/api/v4/backend-deployment-id/users/user-id/sessions/session-id
GET
​Lock user​
/api/v4/backend-deployment-id/users/user-id/lock
POST
​Unlock user​
/api/v4/backend-deployment-id/users/user-id/unlock
POST
​Wipe session​
/api/v4/backend-deployment-id/users/user-id/sessions/session-id/wipe
POST
​Re-authenticate session​
/api/v4/backend-deployment-id/users/user-id/sessions/session-id/re-authenticate
POST
​Generate authentication token​
/api/v4/backend-deployment-id/users/user-id/authentication-token
POST
BASE-URL
The below examples contain a BASE-URL placeholder. Please refer to the HTTP Endpoints section to get the base URL relevant to your deployment.
List all users
API:
GET BASE-URL/api/v4/backend-deployment-id/users[?limit=x&skip=y]
Sample request:
GET BASE-URL/api/v4/533bda53027894f69b001055/users?limit=2&skip=0
Sample response:
json
{
  "total": 47,
  "count": 2,
  "more": true,
  "objects": [
  {
    "id": "c8c8c4f8-5013-11e7-a8c7-04017e679e01",
    "last_connected_at": "2017-08-18T13:33:23Z",
    "enrolled": false,
    "locked": false,
    "sessions": [
      {
        "id": "9469407e-8417-11e7-825d-040151508301",
        "state": "LOCKED",
        "last_authenticated_at": "2017-08-18T13:17:26Z",
        "created_at": "2017-08-18T13:17:26Z",
        "signed_out_at": "2017-08-18T13:33:23Z",
        "last_connected_at": "2017-08-18T13:33:23Z",
        "container": {
          "version": "20.6.1",
          "bundle_id": "xyz.appinstall.myapp",
          "platform": "IOS"
        },
        "runtime": {
          "version": "4.82.0"
        },
        "device": {
          "id": "1234-1234-1234-1234"
        },
        "label": "Apple iPhone7,2",
        "sync_status": {
          "last_full_sync": "2018-07-31T12:17:58Z"
        }
      }
    ]
  },
  {
    "id": "5571fb26-54f7-11e7-a8f8-040151508301",
    "last_connected_at": "2017-08-23T10:12:57Z",
    "enrolled": true,
    "locked": false,
    "sessions": [
      {
        "id": "066b26c4-8418-11e7-9ba9-04017e679e01",
        "state": "ENROLLED",
        "last_authenticated_at": "2017-08-18T13:20:37Z",
        "created_at": "2017-08-18T13:20:37Z",
        "signed_out_at": null,
        "last_connected_at": "2017-08-23T10:12:57Z",
        "container": {
          "version": "20.6.1",
          "bundle_id": "xyz.appinstall.myapp",
          "platform": "ANDROID"
        },
        "runtime": {
          "version": "4.82.0"
        },
        "device": {
          "id": "2345-2345-2345-2345"
        },
        "label": "Sony C6903"
      },
      {
        "id": "556ed8a6-54f7-11e7-a8f8-040151508301",
        "state": "LOCKED",
        "last_authenticated_at": null,
        "created_at": null,
        "signed_out_at": "2017-08-18T13:20:30Z",
        "last_connected_at": "2017-06-19T14:19:39Z",
        "container": {
          "version": "20.6.1",
          "bundle_id": "xyz.appinstall.myapp",
          "platform": "CHROME"
        },
        "runtime": {
          "version": "4.82.0"
        },
        "device": {
          "id": "3456-3456-3456-3456"
        },
        "label": "Chrome"
      }
    ]
  }
]
}
Get single user
API:
GET /api/v4/backend-deployment-id/users/user-id
Sample request:
GET BASE-URL/api/v4/533bda53027894f69b001055/users/c8c8c4f8-5013-11e7-a8c7-04017e679e01
Sample response:
json
{
    "id": "c8c8c4f8-5013-11e7-a8c7-04017e679e01",
    "last_connected_at": "2017-08-18T13:33:23Z",
    "enrolled": false,
    "locked": false,
    "sessions": [
        {
            "id": "9469407e-8417-11e7-825d-040151508301",
            "state": "LOCKED",
            "last_authenticated_at": "2017-08-18T13:17:26Z",
            "created_at": "2017-08-18T13:17:26Z",
            "signed_out_at": "2017-08-18T13:33:23Z",
            "last_connected_at": "2017-08-18T13:33:23Z",
            "container": {
                "version": "20.6.1",
                "bundle_id": "xyz.appinstall.myapp",
                "platform": "IOS"
            },
            "runtime": {
                "version": "4.82.0"
            },
            "device": {
              "id": "3456-3456-3456-3456"
            },
            "label": "Apple iPhone7,2",
            "sync_status": {
                "last_full_sync": "2018-07-31T12:17:58Z"
            }
        }
    ]
}
Get single session
API:
GET /api/v4/backend-deployment-id/users/user-id/sessions/session-id
Sample request:
GET BASE-URL/api/v4/533bda53027894f69b001055/users/c8c8c4f8-5013-11e7-a8c7-04017e679e01/sessions/9469407e-8417-11e7-825d-040151508301
Sample response:
json
{
    "id": "9469407e-8417-11e7-825d-040151508301",
    "state": "LOCKED",
    "last_authenticated_at": "2017-08-18T13:17:26Z",
    "created_at": "2017-08-18T13:17:26Z",
    "signed_out_at": "2017-08-18T13:33:23Z",
    "last_connected_at": "2017-08-18T13:33:23Z",
    "container": {
        "version": "20.6.1",
        "bundle_id": "xyz.appinstall.myapp",
        "platform": "IOS"
    },
    "runtime": {
        "version": "4.82.0"
    },
    "device": {
      "id": "3456-3456-3456-3456"
    },
    "label": "Apple iPhone7,2",
    "sync_status": {
        "last_full_sync": "2018-07-31T12:17:58Z"
    }
}
Fields:
Field
Description
state
ENROLLED: Currently enrolled.
LOCKED: Locked via backend, API, or from the device. Will direct user to the login screen on next connect.
RESET: Like locked, but will force a data wipe the next time the device connects.
NEVER_ENROLLED: Only for legacy data.
last_connected_at
Updated every time the device connects via an API call, such as sync or data upload.
created_at
First enrollment date for this session.
last_authenticated_at
Date of the last enrollment call. Should be close to created_at if this is the first enrollment (may not match exactly).
signed_out_at
Date of last sign out (when the state changed to LOCKED or RESET). Stays present when the session enrolls again.
Apart from last_connected_at, these values only change when the user enrolls or the session is "locked". Note that in typical cases, the same session is used over multiple enrollments if the same device is used, but a new session is created if the user enrolls using a different device.
Lock user
Locking the user will automatically disable the application on all of their devices, as well as prevent them from logging in again.
Note: A user can be unlocked, in which case they will be able to log in again.
If wipe is true, all application data on the device will be permanently deleted. This can include any data or attachments that have not uploaded to the JourneyApps Backend yet. This action cannot be undone.
API:
POST /api/v4/backend-deployment-id/users/user-id/lock
​
{"wipe": true/false}
Or use the batch operation:
{
    "method": "users/lock",
    "user_id": "...",
    "wipe": true/false
}
Note: the wipe parameter is required.
The response code is 204 if successful.
Unlock user
Allow a locked user to log in again.
API:
POST /api/v4/backend-deployment-id/users/user-id/unlock
Or use the batch operation:
{
    "method": "users/unlock",
    "user_id": "..."
}
The response code is 204 if successful.
Wipe session
This will permanently delete all application data from the specific device. This can include any data or attachments that have not uploaded to the JourneyApps Backend yet. This action cannot be undone.
This does not affect any other sessions, and the user will still be able to log in.
API:
POST /api/v4/backend-deployment-id/users/user-id/sessions/session-id/wipe
Or use the batch operation:
{
    "method": "users/sessions/wipe",
    "user_id": "...",
    "session_id: "..."
}
The response code is 204 if successful.
Re-authenticate session
This disables the session, requiring the user to log in again. No data is deleted on the device.
API:
POST /api/v4/backend-deployment-id/users/user-id/sessions/session-id/re-authenticate
Or use the batch operation:
{
    "method": "users/sessions/re-authenticate",
    "user_id": "...",
    "session_id: "..."
}
The response code is 204 if successful.
Generate Authentication Token
Generate a temporary token that can be used for enrollment. 
Authentication tokens expire 5 minutes after being created.
If the "multiple devices per user" flag is not enabled for the application, this can only be used to enroll one user at a time.
API:
POST /api/v4/backend-deployment-id/users/user-id/authentication-token
Or use the batch operation:
{
    "method": "users/authentication-token",
    "user_id": "..."
}
Sample Response:
{
    "token": "12345678",
    "url": "https://embark.mobi/enroll?h=internal-testing.journeyapps.com&k=12345678&t=j"
}

API	Relative URL	HTTP Request Method
List all users	`/api/v4/backend-deployment-id/users`	GET
Get user and sessions	`/api/v4/backend-deployment-id/users/user-id`	GET
Get single session	`/api/v4/backend-deployment-id/users/user-id/sessions/session-id`	GET
Lock user	`/api/v4/backend-deployment-id/users/user-id/lock`	POST
Unlock user	`/api/v4/backend-deployment-id/users/user-id/unlock`	POST
Wipe session	`/api/v4/backend-deployment-id/users/user-id/sessions/session-id/wipe`	POST
Re-authenticate session	`/api/v4/backend-deployment-id/users/user-id/sessions/session-id/re-authenticate`	POST
Generate authentication token	`/api/v4/backend-deployment-id/users/user-id/authentication-token`	POST

Field	Description
`state`	`ENROLLED`: Currently enrolled. `LOCKED`: Locked via backend, API, or from the device. Will direct user to the login screen on next connect. `RESET`: Like locked, but will force a data wipe the next time the device connects. `NEVER_ENROLLED`: Only for legacy data.
`last_connected_at`	Updated every time the device connects via an API call, such as sync or data upload.
`created_at`	First enrollment date for this session.
`last_authenticated_at`	Date of the last enrollment call. Should be close to `created_at` if this is the first enrollment (may not match exactly).
`signed_out_at`	Date of last sign out (when the state changed to `LOCKED` or `RESET`). Stays present when the session enrolls again.

Retrieve the App Data Model

Field Representation

Last modified 6mo ago