Error
Customer plane
List the contact's sessions
Where this contact is signed in — the same “my devices” screen staff get, one layer down. The token hash is never part of it.
This is not a nice-to-have. The contact session token lives on your domain without httpOnly, so being able to see and end a session is part of that token’s safety case.
GET
Error