Manage App Users and Sessions
Each app has a user model that represents users that can enroll in the application. Whenever a user object is created, additional metadata is stored to facilitate enrollment and session management.
A single user may be have one or more sessions. A session represents a single device that is (or was) signed in.
To allow a user to have more than one session, the "Multiple devices per user" feature flag must be enabled for the application.

Parameters

To retrieve, create, update or delete mobile users, follow the instructions in these sections of the documentation for your mobile user object type (e.g. user):
Deleting the user object will lock the user and wipe all app data from the user's enrolled devices. This operation is irreversible.
Version compatibility
  • The sync_status field with last_full_sync is only available for devices with version 4.36.0 or greater of the JourneyApps Container.
  • Before managed runtime versions (i.e. before version 4.70), only the installed container version was reported to the backend. Since version 4.70 the runtime version was reported, though it was still erroneously called the "container version" on the backend. As of version 4.82, both the runtime and container versions are reported correctly to the JourneyApps backend.

User and Sessions API

API
Relative URL
HTTP Request Method
โ€‹List all usersโ€‹
/api/v4/app-instance-id/users
GET
โ€‹Get user and sessionsโ€‹
/api/v4/app-instance-id/users/user-id
GET
โ€‹Get single sessionโ€‹
/api/v4/app-instance-id/users/user-id/sessions/session-id
GET
โ€‹Lock userโ€‹
/api/v4/app-instance-id/users/user-id/lock
POST
โ€‹Unlock userโ€‹
/api/v4/app-instance-id/users/user-id/unlock
POST
โ€‹Wipe sessionโ€‹
/api/v4/app-instance-id/users/user-id/sessions/session-id/wipe
POST
/api/v4/app-instance-id/users/user-id/sessions/session-id/re-authenticate
POST
/api/v4/app-instance-id/users/user-id/authentication-token
POST

List all users

API:
GET /api/v4/app-instance-id/users[?limit=x&skip=y]
Sample request:
GET https://run-testing-us.journeyapps.com/api/v4/533bda53027894f69b001055/users?limit=2&skip=0
Sample response:
{
"total": 47,
"count": 2,
"more": true,
"objects": [
{
"id": "c8c8c4f8-5013-11e7-a8c7-04017e679e01",
"last_connected_at": "2017-08-18T13:33:23Z",
"enrolled": false,
"locked": false,
"sessions": [
{
"id": "9469407e-8417-11e7-825d-040151508301",
"state": "LOCKED",
"last_authenticated_at": "2017-08-18T13:17:26Z",
"created_at": "2017-08-18T13:17:26Z",
"signed_out_at": "2017-08-18T13:33:23Z",
"last_connected_at": "2017-08-18T13:33:23Z",
"container": {
"version": "20.6.1",
"bundle_id": "xyz.appinstall.myapp",
"platform": "IOS"
},
"runtime": {
"version": "4.82.0"
},
"device": {
"id": "1234-1234-1234-1234"
},
"label": "Apple iPhone7,2",
"sync_status": {
"last_full_sync": "2018-07-31T12:17:58Z"
}
}
]
},
{
"id": "5571fb26-54f7-11e7-a8f8-040151508301",
"last_connected_at": "2017-08-23T10:12:57Z",
"enrolled": true,
"locked": false,
"sessions": [
{
"id": "066b26c4-8418-11e7-9ba9-04017e679e01",
"state": "ENROLLED",
"last_authenticated_at": "2017-08-18T13:20:37Z",
"created_at": "2017-08-18T13:20:37Z",
"signed_out_at": null,
"last_connected_at": "2017-08-23T10:12:57Z",
"container": {
"version": "20.6.1",
"bundle_id": "xyz.appinstall.myapp",
"platform": "ANDROID"
},
"runtime": {
"version": "4.82.0"
},
"device": {
"id": "2345-2345-2345-2345"
},
"label": "Sony C6903"
},
{
"id": "556ed8a6-54f7-11e7-a8f8-040151508301",
"state": "LOCKED",
"last_authenticated_at": null,
"created_at": null,
"signed_out_at": "2017-08-18T13:20:30Z",
"last_connected_at": "2017-06-19T14:19:39Z",
"container": {
"version": "20.6.1",
"bundle_id": "xyz.appinstall.myapp",
"platform": "CHROME"
},
"runtime": {
"version": "4.82.0"
},
"device": {
"id": "3456-3456-3456-3456"
},
"label": "Chrome"
}
]
}
]
}

Get single user

API:
GET /api/v4/app-instance-id/users/user-id
Sample request:
GET https://run-testing-us.journeyapps.com/api/v4/533bda53027894f69b001055/users/c8c8c4f8-5013-11e7-a8c7-04017e679e01
Sample response:
{
"id": "c8c8c4f8-5013-11e7-a8c7-04017e679e01",
"last_connected_at": "2017-08-18T13:33:23Z",
"enrolled": false,
"locked": false,
"sessions": [
{
"id": "9469407e-8417-11e7-825d-040151508301",
"state": "LOCKED",
"last_authenticated_at": "2017-08-18T13:17:26Z",
"created_at": "2017-08-18T13:17:26Z",
"signed_out_at": "2017-08-18T13:33:23Z",
"last_connected_at": "2017-08-18T13:33:23Z",
"container": {
"version": "20.6.1",
"bundle_id": "xyz.appinstall.myapp",
"platform": "IOS"
},
"runtime": {
"version": "4.82.0"
},
"device": {
"id": "3456-3456-3456-3456"
},
"label": "Apple iPhone7,2",
"sync_status": {
"last_full_sync": "2018-07-31T12:17:58Z"
}
}
]
}

Get single session

API:
GET /api/v4/app-instance-id/users/user-id/sessions/session-id
Sample request:
GET https://run-testing-us.journeyapps.com/api/v4/533bda53027894f69b001055/users/c8c8c4f8-5013-11e7-a8c7-04017e679e01/sessions/9469407e-8417-11e7-825d-040151508301
Sample response:
{
"id": "9469407e-8417-11e7-825d-040151508301",
"state": "LOCKED",
"last_authenticated_at": "2017-08-18T13:17:26Z",
"created_at": "2017-08-18T13:17:26Z",
"signed_out_at": "2017-08-18T13:33:23Z",
"last_connected_at": "2017-08-18T13:33:23Z",
"container": {
"version": "20.6.1",
"bundle_id": "xyz.appinstall.myapp",
"platform": "IOS"
},
"runtime": {
"version": "4.82.0"
},
"device": {
"id": "3456-3456-3456-3456"
},
"label": "Apple iPhone7,2",
"sync_status": {
"last_full_sync": "2018-07-31T12:17:58Z"
}
}
Fields:
Field
Description
state
ENROLLED: Currently enrolled.
state
LOCKED: Locked via backend, API, or from the device. Will direct user to the login screen on next connect.
state
RESET: Like locked, but will force a data wipe the next time the device connects.
state
NEVER_ENROLLED: Only for legacy data.
last_connected_at
Updated every time the device connects via an API call, such as sync or data upload.
created_at
First enrollment date for this session.
last_authenticated_at
Date of the last enrollment call. Should be close to created_at if this is the first enrollment (may not match exactly).
signed_out_at
Date of last sign out (when the state changed to LOCKED or RESET). Stays present when the session enrolls again.
Apart from last_connected_at, these values only change when the user enrolls or the session is "locked". Note that in typical cases, the same session is used over multiple enrollments if the same device is used, but a new session is created if the user enrolls using a different device.

Lock user

Locking the user will automatically disable the application on all of their devices, as well as prevent them from logging in again.
Note: A user can be unlocked, in which case they will be able to log in again.
If wipe is true, all application data on the device will be permanently deleted. This can include any data or attachments that have not uploaded to the JourneyApps Backend yet. This action cannot be undone.
API:
POST /api/v4/app-instance-id/users/user-id/lock
โ€‹
{"wipe": true/false}
Or use the batch operation:
{
"method": "users/lock",
"user_id": "...",
"wipe": true/false
}
Note: the wipe parameter is required.
Response code is 204 if successful.

Unlock user

Allow a locked user to log in again.
API:
POST /api/v4/app-instance-id/users/user-id/unlock
Or use the batch operation:
{
"method": "users/unlock",
"user_id": "..."
}
Response code is 204 if successful.

Wipe session

This will permanently delete all application data from the specific device. This can include any data or attachments that have not uploaded to the JourneyApps Backend yet. This action cannot be undone.
This does not affect any other sessions, and the user will still be able to log in.
API:
POST /api/v4/app-instance-id/users/user-id/sessions/session-id/wipe
Or use the batch operation:
{
"method": "users/sessions/wipe",
"user_id": "...",
"session_id: "..."
}
Response code is 204 if successful.

Re-authenticate session

This disables the session, requiring the user to log in again. No data is deleted on the device.
API:
POST /api/v4/app-instance-id/users/user-id/sessions/session-id/re-authenticate
Or use the batch operation:
{
"method": "users/sessions/re-authenticate",
"user_id": "...",
"session_id: "..."
}
Response code is 204 if successful.

Generate Authentication Token

Generate a temporary token that can be used for enrollment. This token expires 5 minutes after being created.
If multiple devices per user is not enabled for the application, this can only be used to enroll one user at a time.
API:
POST /api/v4/app-instance-id/users/user-id/authentication-token
Or use the batch operation:
{
"method": "users/authentication-token",
"user_id": "..."
}
Sample Response:
{
"token": "12345678",
"url": "https://embark.mobi/enroll?h=internal-testing.journeyapps.com&k=12345678&t=j"
}
Copy link
On this page
Parameters
User and Sessions API