# Verify Jwt Token

**POST /Auth/Verify/Token**

This process validates the JWT token sent in and returns information about it including the logged in user. Note that usually the token is passed as a cookie since /auth/verify/login sets the cookie. This needs to be called for every non logged in page for page tracking.
*Secret Hmac Required. Cache Time 1 Hour.*



## Servers
- https://api.wrtm.io/v1.0: https://api.wrtm.io/v1.0 ()
- https://api.whyreadthemanual.com/v1.0: https://api.whyreadthemanual.com/v1.0 ()
- https://api.wereadthemanual.com/v1.0: https://api.wereadthemanual.com/v1.0 ()


## Authentication methods
- Authorization key & Authorization date & Authorization hmac


## Parameters



### Body: application/json (object)

- **Href** (string)
  required copy of document.href since referrer is not always accurate
- **Token** (string)
  the jwt token returned from /Auth/Verify/Login or /Auth/Verify/Token


## Responses
### 200
Token Details successfully returned with or without login info

#### Body: application/json (object)
- **Valid** (number)
  0 if expired, 1 if not
- **Expires** (number)
  Seconds until the jwt token expires and login is valid.  If expired, it returns negative seconds
- **Custno** (number)
  Customer User Number (frequently the same as parent)
- **Parent** (number)
  Parent User Number
- **IdLogin** (number)
  The current user Login Id
- **LoginIp** (string)
  the Ip address of the logged in user
- **Message** (string)
  the message to display on the screen
- **FirstName** (string)
  the First Name of the logged in user
- **LastName** (string)
  the Last Name of the logged in user
- **LoginTime** (string)
  the date/time logged in (YYYYMMDDHHMMSS)
- **PrevLogin** (string)
  the date/time previously logged in (YYYYMMDDHHMMSS)

### 401
Token Is Not Valid

#### Body: application/json (object)
- **Valid** (number)
  0 if expired, 1 if not
- **Expires** (number)
  Seconds until the jwt token expires and login is valid.  If expired, it returns negative seconds
- **Username** (string)
  If they checked to save username, this responds with the last username passed
- **Message** (string)
  debug message for why this failed


[Powered by Bump.sh](https://bump.sh)