Get Visitor Profile

Returns the signed-in visitor's public profile and the listings they liked on this site. Use it to show the account menu and the heart state of listing cards.

GET/v1/auth/me

Authentication

Public key + visitor?key=pk_… · Authorization: Bearer

Public key in the `key` query parameter, plus the signed-in visitor's access token as `Authorization: Bearer`.

Edge cache: no-store

Query Parameters

keystring

required

The site's public key (pk_…). It selects the account. Safe to ship to the browser.

Responses

200Success

application/json

authUserobject

likesarray[object]

Errors

401`Sign in required`: the access token is missing, expired, or was issued for another site. Refresh it or ask the visitor to sign in.

403The Panda account is not active. The body also carries `code: "TENANT_INACTIVE"`.

Notes

`image` and `phones` can be missing when the visitor never set them.
`isSiteOwner` is true when the visitor is the site's owner signed in on the site.

Request

curl --request GET \
  --url "https://api.pandaidx.com/v1/auth/me?key={{public_key}}" \
  --header "Authorization: Bearer {{visitor_token}}"

Response200 OK

{
  "authUser": {
    "_id": "6a0f1c2d3e4f5a6b7c8d9e01",
    "name": "Alex Example",
    "email": "alex.example@example.com",
    "image": "https://cdn.example.com/avatars/alex-example.jpg",
    "phones": [
      "305-555-0142"
    ],
    "isSiteOwner": false
  },
  "likes": [
    {
      "listingId": "A11234567"
    },
    {
      "listingId": "A11234890"
    }
  ]
}