# Sessions

Manage sessions and refresh access tokens for silent authentication and SSO across apps. These sessions apply to any of the authentication methods implemented using a backend-to-backend integration ('Backend Authentication').


## Servers

Sandbox environment
```
https://api.sbx.transmitsecurity.io/cis
```

US production environment
```
https://api.transmitsecurity.io/cis
```

EU production environment
```
https://api.eu.transmitsecurity.io/cis
```

CA production environment
```
https://api.ca.transmitsecurity.io/cis
```

AU production environment
```
https://api.au.transmitsecurity.io/cis
```

JP production environment
```
https://api.gasne1-ts01.transmitsecurity.io/cis
```

## Security

### bearer

Type: http
Scheme: bearer
Bearer Format: JWT

### UserAccessToken

A token returned upon end-user authentication, which provides access to resources and data for the user and app for which it was generated

Type: http
Scheme: bearer
Bearer Format: JWT

### AdminAccessToken

[object Object]

Type: oauth2
Token URL: /oidc/token
Scopes:

### ClientAccessToken

[object Object]

Type: oauth2
Token URL: /oidc/token
Scopes:

### OrgAdminAccessToken

A token returned upon B2B authentication for a user that has the organizationAdmin or organizationCreator role.

Type: oauth2
Token URL: /oidc/token
Scopes:

## Download OpenAPI description

 - [Sessions](https://developer.transmitsecurity.com/_bundle/openapi/user/backend-sessions.openapi.yaml)

 - [POST /v1/auth/session/authenticate](https://developer.transmitsecurity.com/openapi/user/backend-sessions.openapi/other/authenticatesession.md): Authenticates an existing session in order to obtain an access token without explicit user interaction. This enables silent authentication and single sign-on (SSO).
 - [POST /v1/auth/token/refresh](https://developer.transmitsecurity.com/openapi/user/backend-sessions.openapi/other/refreshbackendauthtoken.md): Exchange the refresh token returned upon successful authentication for a new access token. <br><br>**Required permissions**: `apps:execute`, `[appId]:execute`, `auth:execute`.
 - [POST /v1/auth/session/logout](https://developer.transmitsecurity.com/openapi/user/backend-sessions.openapi/other/logout.md): Logs out the user by terminating the provided session. <br><br>**Required permissions**: `apps:delete`, `[appId]:delete`, `sessions:delete`.
 - [GET /v1/auth/users/{userId}/sessions](https://developer.transmitsecurity.com/openapi/user/backend-sessions.openapi/other/getusersessions.md): Retrieves all active sessions for a specified user. <br><br>**Required permissions**: `apps:read`, `[appId]:read`, `sessions:read`.
 - [DELETE /v1/auth/users/{userId}/sessions](https://developer.transmitsecurity.com/openapi/user/backend-sessions.openapi/other/revokeusersessions.md): Revokes all user sessions. <br><br>**Required permissions**: `apps:delete`, `[appId]:delete`, `sessions:delete`.