List a target user's active MFA-trusted devices (admin)

Same shape as the user-self endpoint, but admin-gated: the caller must hold users.edit against the target’s institution (super admins bypass). Listing is useful before deciding to revoke an individual device for the user.

GET /api/admin/users/{userId}/trusted-devices

List a target user's active MFA-trusted devices (admin)

cURL

curl --request GET \
  --url https://pria.praxislxp.com/api/admin/users/{userId}/trusted-devices \
  --header 'Authorization: Bearer <token>'

200

{
  "success": true,
  "devices": [
    {
      "id": "<string>",
      "deviceId": "<string>",
      "sourceIp": "<string>",
      "ua": "<string>",
      "createdAt": "2023-11-07T05:31:56Z",
      "lastUsedAt": "2023-11-07T05:31:56Z",
      "expiresAt": "2023-11-07T05:31:56Z"
    }
  ]
}

Authorizations

Authorization · string · header · required

JWT token passed in authorization header

Path Parameters

userId · string · required

Response

200

application/json

List of active trusted devices for the target user.

success · boolean

devices · object[]

Show child attributes