# Managing Session Tokens
URL: https://www.quiltt.dev/authentication/managing-session-tokens
Description: Learn how to manage existing Session tokens in Quiltt. Discover how to check the validity and revoke tokens for secure user sessions.
Navigation: authentication → managing-session-tokens
Tags: Authentication

REST API Note:

Check validity and revoke Session tokens to manage rate limits and security.

Pass the Session token as Bearer:

```yaml
Authorization: Bearer <SESSION_TOKEN>
```

Info:
Revoked tokens immediately free rate limit quota (10/hour, 20/day per Profile).

## Check Validity

API Endpoint - GET https://auth.quiltt.io/v1/users/session:

Verify cached tokens before issuing new ones (app startup, before Connector launch, after network errors):

Code Examples:

  ```sh
    curl --request GET \
      --url 'https://auth.quiltt.io/v1/users/session' \
      --header 'Authorization: Bearer <SESSION_TOKEN>'
    ```
  ```json
    ["token": "eyJhbGciOiJIUzUxMiJ9.eyJuYmYiOjE2NzE4MjI5MTIsImlhdCI6MTY3MTgyMjkxMiwianRpIjoiNDU1MWNhNDktYzAwMi00ZDliLTkyZWMtNDY1MDE4ZTI4ZmRjIiwiaXNzIjoiYXV0aC5xdWlsdHQuaW8iLCJhdWQiOiJhcGkucXVpbHR0LmlvIiwiZXhwIjoxNjcxOTA5MzEyLCJ2ZXIiOjIsImRpZCI6ImFwaV8xN05PRXdWR2N2eU9xcGxuUWREMjdnWSIsInVpZCI6InBfMTFld3JWa0VuZDdMSXZTVkFtdDhYTDUifQ.5tYTjr_k0GKG6LsaAEt3V0RAiJe9UU59USUAASJTXf5e1923njb4UqYUozAVm34fARXT-SRvlE1-_J4wdiVNwg",
      "userId": "p_11ewrVkEnd7LIvSVAmt8XL5",
      "environmentId": "env_1Bx4omNvZgKao2OqGshImD",
      "expiration": 1671909244,
      "expiresAt": "2022-12-24T19:14:04Z"]
    ```

## Revoke Tokens

API Endpoint - DELETE https://auth.quiltt.io/v1/users/session:

Free rate limit quota by revoking tokens at logout, session timeout, or security events:

Code Examples:

  ```sh
    curl --request DELETE \
      --url 'https://auth.quiltt.io/v1/users/session' \
      --header 'Authorization: Bearer <SESSION_TOKEN>'
    ```
  ```http
    204 No Content
    ```

## SDK Examples

See [Best Practices](/authentication/issuing-session-tokens#best-practices) for complete caching and logout implementations using Quiltt SDKs.