Device/Session Management

This section contains the API documentation for managing user devices and sessions in the Flashback platform.

Overview

The Device and Session Management APIs allow users to:

• View and manage their registered devices

• Monitor active sessions across devices

• Control device trust levels

• Revoke sessions for security purposes

Available Endpoints

Device Management

Method	API Reference	Description
GET/devices	get__devices	Retrieve all user devices
GET/devices/{id}	get__devices-id	Get detailed information about a specific device
POST/devices/trust	post__devices_trust	Mark a device as trusted
POST/devices/{id}/untrust	post__devices_-id_untrust	Remove trust from a device
DELETE/devices/{id}	delete__devices_-{id}	Permanently remove a device

Session Management

Method	API Reference	Description
GET/sessions	get__sessions	Retrieve all active user sessions
POST/sessions/{id}/revoke	post__sessions_-id_revoke	Revoke a specific session
POST/sessions/revoke-all	post__sessions_revoke-all	Revoke all user sessions
POST/devices/{id}/heartbeat	post__sessions_-id_heartbeat	Update session activity and extend expiry

Authentication

All endpoints require authentication using a Bearer token in the Authorization header.

Common Response Format

All API responses follow a consistent format:

{
  "success": boolean,
  "data": object | array,
  "message": string,
  "error": string
}

Error Handling

The APIs return appropriate HTTP status codes:

• 200 - Success

• 404 - Resource not found

• 500 - Internal server error

Rate Limiting

These APIs are subject to rate limiting to prevent abuse. Please implement appropriate retry logic with exponential backoff in your applications.