❔APIs ---> Session and My details • Rate limiting / throttling? • what’s required permission access? Why it matters: In time, we will want to pull user session data into the same set we have with all other transactional data.

Hi Laura - the rate limit is really high, so you should not encounter it at this point. If you do - let us know, and we can review the use case and implementation. To get session information with the API, you need the following authorization bearer format:

Authorization: Bearer <Project ID:Refresh JWT>

This means you need both your project ID and the refresh JWT of the user divided by a colon.

Works for me. 🙂

Understood. Rest assure this will not be a problem under reasonable load. We've intentionally put this very high as we feel you should not be impacted unless you do something very out of the ordinary.

Awesome thanks