POST
/
public
/
v1
/
query
/
get_user
Authorizations
Body
string
required
Unique identifier for a given organization.
string
required
Unique identifier for a given user.
Response
A successful response returns the following fields:object
required
user field
Show user details
Show user details
A list of Authenticator parameters.
Show authenticators details
Show authenticators details
Types of transports that may be used by an Authenticator (e.g., USB, NFC, BLE).
credential field
Show credential details
Show credential details
The public component of a cryptographic key pair used to sign messages and transactions.
type fieldEnum options:
CREDENTIAL_TYPE_WEBAUTHN_AUTHENTICATOR, CREDENTIAL_TYPE_API_KEY_P256, CREDENTIAL_TYPE_RECOVER_USER_KEY_P256, CREDENTIAL_TYPE_API_KEY_SECP256K1, CREDENTIAL_TYPE_EMAIL_AUTH_KEY_P256, CREDENTIAL_TYPE_API_KEY_ED25519, CREDENTIAL_TYPE_OTP_AUTH_KEY_P256, CREDENTIAL_TYPE_READ_WRITE_SESSION_KEY_P256, CREDENTIAL_TYPE_OAUTH_KEY_P256, CREDENTIAL_TYPE_LOGINA list of API Key parameters. This field, if not needed, should be an empty array in your request body.
Show apiKeys details
Show apiKeys details
credential field
Show credential details
Show credential details
The public component of a cryptographic key pair used to sign messages and transactions.
type fieldEnum options:
CREDENTIAL_TYPE_WEBAUTHN_AUTHENTICATOR, CREDENTIAL_TYPE_API_KEY_P256, CREDENTIAL_TYPE_RECOVER_USER_KEY_P256, CREDENTIAL_TYPE_API_KEY_SECP256K1, CREDENTIAL_TYPE_EMAIL_AUTH_KEY_P256, CREDENTIAL_TYPE_API_KEY_ED25519, CREDENTIAL_TYPE_OTP_AUTH_KEY_P256, CREDENTIAL_TYPE_READ_WRITE_SESSION_KEY_P256, CREDENTIAL_TYPE_OAUTH_KEY_P256, CREDENTIAL_TYPE_LOGINA list of Oauth Providers.
Show oauthProviders details
Show oauthProviders details
The issuer of the token, typically a URL indicating the authentication server, e.g https://accounts.google.com
Expected audience (‘aud’ attribute of the signed token) which represents the app ID
Expected subject (‘sub’ attribute of the signed token) which represents the user ID
curl --request POST \
--url https://api.turnkey.com/public/v1/query/get_user \
--header 'Accept: application/json' \
--header 'Content-Type: application/json' \
--header "X-Stamp: <string> (see Authorizations)" \
--data '{
"organizationId": "<string>",
"userId": "<string>"
}'
import { Turnkey } from "@turnkey/sdk-server";
const turnkeyClient = new Turnkey({
apiBaseUrl: "https://api.turnkey.com",
apiPublicKey: process.env.API_PUBLIC_KEY!,
apiPrivateKey: process.env.API_PRIVATE_KEY!,
defaultOrganizationId: process.env.ORGANIZATION_ID!,
});
const response = await turnkeyClient.apiClient().getUser({
organizationId: "<string> (Unique identifier for a given organization.)",
userId: "<string> (Unique identifier for a given user.)"
});
{
"user": {
"userId": "<string>",
"userName": "<string>",
"userEmail": "<string>",
"userPhoneNumber": "<string>",
"authenticators": [
{
"transports": [
"<AUTHENTICATOR_TRANSPORT_BLE>"
],
"attestationType": "<string>",
"aaguid": "<string>",
"credentialId": "<string>",
"model": "<string>",
"credential": {
"publicKey": "<string>",
"type": "<CREDENTIAL_TYPE_WEBAUTHN_AUTHENTICATOR>"
},
"authenticatorId": "<string>",
"authenticatorName": "<string>",
"createdAt": {
"seconds": "<string>",
"nanos": "<string>"
},
"updatedAt": {
"seconds": "<string>",
"nanos": "<string>"
}
}
],
"apiKeys": [
{
"credential": {
"publicKey": "<string>",
"type": "<CREDENTIAL_TYPE_WEBAUTHN_AUTHENTICATOR>"
},
"apiKeyId": "<string>",
"apiKeyName": "<string>",
"createdAt": {
"seconds": "<string>",
"nanos": "<string>"
},
"updatedAt": {
"seconds": "<string>",
"nanos": "<string>"
},
"expirationSeconds": "<string>"
}
],
"userTags": [
"<string>"
],
"oauthProviders": [
{
"providerId": "<string>",
"providerName": "<string>",
"issuer": "<string>",
"audience": "<string>",
"subject": "<string>",
"createdAt": {
"seconds": "<string>",
"nanos": "<string>"
},
"updatedAt": {
"seconds": "<string>",
"nanos": "<string>"
}
}
],
"createdAt": {
"seconds": "<string>",
"nanos": "<string>"
},
"updatedAt": {
"seconds": "<string>",
"nanos": "<string>"
}
}
}