Memos

Get Current User

GetCurrentUser returns the authenticated user, similar to OIDC's /userinfo endpoint. When the caller is not signed in or the account is no longer active, clears the refresh token cookie and returns UNAUTHENTICATED.

GET
/api/auth/me

Response Body

application/json

application/json

curl -X GET "https://example.com/api/auth/me"
{  "user": {    "name": "string",    "username": "string",    "displayName": "string",    "email": "string",    "avatarUrl": "string",    "description": "string",    "password": "string",    "role": "ROLE_UNSPECIFIED",    "state": "STATE_UNSPECIFIED",    "createTime": "2019-08-24T14:15:22Z",    "updateTime": "2019-08-24T14:15:22Z"  }}

Upload Attachment

UploadAttachment uploads a file in bounded chunks. The first call carries the spec and returns an upload_id; later calls carry that upload_id. Uploads are bound to the authenticated user, expire after 30 minutes of inactivity, and do not survive a server restart.

Refresh Token

RefreshToken exchanges the refresh token for a new access token. The refresh token is read from the HttpOnly cookie and rotated: the old token is revoked and a new one with a fresh 30-day expiry is set in the cookie. Public, so it can be called after the access token has expired.