> ## Documentation Index > Fetch the complete documentation index at: https://docs.devmob.app.br/llms.txt > Use this file to discover all available pages before exploring further. # List Sessions > Lists sessions. ## OpenAPI ````yaml /api-reference/customer/openapi.json get /api/v1/customer/sessions openapi: 3.0.0 info: title: DEVMOB Customer API description: DEVMOB API version: '1.0' contact: {} servers: [] security: [] tags: - name: Address description: Customer addresses - name: Auth description: Authentication and token lifecycle - name: Benefit Program description: Fare benefit programs - name: Benefit Request description: Fare benefit requests and documents - name: Checkout description: Checkout creation and retrieval - name: Credit Grant description: Customer credits - name: Invite description: Invitation preview and acceptance - name: Notification description: Customer inbox notifications - name: Offering description: Trip offerings and seat maps - name: Order description: Customer orders - name: OTP description: One-time password flows - name: Payment description: Payments - name: Payment Method description: Saved payment methods - name: Point description: Point lookup - name: Profile description: Authenticated customer profile - name: Promotion description: Promotions - name: Routing description: Routing helpers - name: Session description: Authenticated sessions - name: Storage description: Storage uploads - name: Support description: Support cases - name: Ticket description: Customer tickets - name: Trip description: Customer trip access - name: Trip Review description: Trip reviews paths: /api/v1/customer/sessions: get: tags: - Session summary: List Sessions description: Lists sessions. operationId: listCustomerSessions parameters: - name: limit in: query required: false schema: type: number default: 10 minimum: 1 maximum: 100 description: Items per page. - name: page in: query required: false schema: type: number default: 1 minimum: 1 description: Page number. - name: audience in: query required: false schema: type: string enum: - CUSTOMER - OPS - DRIVER - BACKOFFICE description: Session audience. - name: status in: query required: false schema: type: string enum: - ACTIVE - REVOKED description: Session status. - name: sortBy in: query required: false schema: type: string enum: - lastUsedAt - createdAt - refreshExpiresAt default: lastUsedAt description: Field to sort by. - name: sortOrder in: query required: false schema: type: string enum: - asc - desc default: desc description: Sort direction. - name: fields in: query required: false description: >- Comma-separated list of fields to include in the response. Supports dot notation. schema: type: string responses: '200': description: OK content: application/json: schema: type: object properties: data: type: array items: $ref: '#/components/schemas/UserSession' meta: $ref: '#/components/schemas/PageMeta' required: - data - meta '400': $ref: '#/components/responses/BadRequestError' '401': $ref: '#/components/responses/UnauthorizedError' '500': $ref: '#/components/responses/InternalServerError' components: schemas: UserSession: type: object properties: userSessionId: type: string format: uuid description: Identificador único da sessão. Também é usado como sid nos tokens userId: type: string format: uuid description: Referência ao usuário autenticado audience: type: string enum: - CUSTOMER - OPS - DRIVER - BACKOFFICE description: Superfície onde a sessão foi criada refreshTokenHash: type: string description: Hash unidirecional do refresh token ativo da sessão deviceId: type: string nullable: true description: Identificador estável do dispositivo, quando informado pelo cliente deviceName: type: string nullable: true description: Nome exibível do dispositivo userAgent: type: string nullable: true description: User agent capturado no login ou refresh ipAddress: type: string nullable: true description: IP capturado no login ou refresh status: type: string enum: - ACTIVE - REVOKED description: 'Estado manual da sessão. Default: ACTIVE' lastUsedAt: type: string format: date-time description: Última vez em que a sessão foi usada em autenticação ou refresh refreshExpiresAt: type: string format: date-time description: Data limite para uso do refresh token inactivityExpiresAt: type: string format: date-time nullable: true description: Data limite por inatividade, quando a política estiver habilitada revokedAt: type: string format: date-time nullable: true description: Data de revogação manual ou automática revokedBy: type: string format: uuid nullable: true description: Usuário que revogou a sessão, quando a revogação for manual revokedReason: type: string nullable: true description: Motivo técnico ou operacional da revogação createdBy: type: string format: uuid nullable: true description: Usuário que criou a sessão, quando aplicável createdAt: type: string format: date-time description: Data de criação updatedBy: type: string format: uuid nullable: true description: Usuário que fez a última atualização, quando aplicável updatedAt: type: string format: date-time description: Data da última atualização required: - userSessionId - userId - audience - refreshTokenHash - deviceId - deviceName - userAgent - ipAddress - status - lastUsedAt - refreshExpiresAt - inactivityExpiresAt - revokedAt - revokedBy - revokedReason - createdBy - createdAt - updatedBy - updatedAt description: Sessão autenticada revogável com persistência server-side PageMeta: type: object properties: limit: type: integer description: Items per page. example: 10 page: type: integer description: Current page. example: 1 totalItems: type: integer description: Total items. example: 142 totalPages: type: integer description: Total pages. example: 15 required: - limit - page - totalItems - totalPages description: Page-based pagination metadata. ValidationError: type: object properties: statusCode: type: integer description: HTTP status code. example: 400 message: type: string description: Error message. example: Bad Request Error errors: type: array items: type: object properties: code: type: string description: Validation code. example: invalid_type message: type: string description: Validation message. example: Required path: type: string description: Invalid field path. example: name required: - code - message - path required: - statusCode - message - errors description: Validation error response. ApiError: type: object properties: statusCode: type: integer description: HTTP status code. example: 404 error: type: string description: HTTP error name. example: Not Found message: type: string description: Machine-readable error code. example: resource.not_found required: - statusCode - error - message description: Domain error response. responses: BadRequestError: description: Validation failed. content: application/json: schema: $ref: '#/components/schemas/ValidationError' UnauthorizedError: description: Authentication required. content: application/json: schema: $ref: '#/components/schemas/ApiError' InternalServerError: description: Internal server error. content: application/json: schema: $ref: '#/components/schemas/ApiError' ````