---
type: api
title: User authentication information
description: Provides authentication information about a user, including elevated permission status and TOTP device availability.
url: https://www.elastic.co/elastic/docs-builder/docs/4641/api/doc/cloud-enterprise/v3/operation/operation-get-authentication-info
resource: https://www.elastic.co/elastic/docs-builder/docs/4641/api/doc/cloud-enterprise/v3/operation/operation-get-authentication-info
products:
  - Elastic Cloud Enterprise
---

# User authentication information

Authentication: required

## Paths

- `GET` `/users/auth`

## Description

Provides authentication information about a user, including elevated permission status and TOTP device availability.

## Response

User authentication information response

`application/json`

- `has_totp_device` (boolean)
  Deprecated: True if the user has an available TOTP device
- `totp_device_source` (string)
  Deprecated: The TOTP device source
- `has_elevated_permissions` (boolean)
  Deprecated: True if the user has elevated permissions
- `elevated_permissions_expire_at` (string · format: date-time)
  Deprecated: The UTC time when elevated permissions will expire, if the user has elevated permissions
- `totp_device_source_enable_mfa_href` (string)
  Deprecated: URL for configuring an MFA TOTP device.  Does not apply when totp_device_source is 'native'.
- `refresh_token_url` (string)
  The API to be used when refreshing the current user's JWT
- `expires_at` (string · format: date-time)
  The UTC time when current authentication will expire. Applies to only token based authentication
## Code examples

#### curl

```curl
curl -X GET "${API_URL}/users/auth" \
  -u "${USERNAME}:${PASSWORD}"
```

## Response examples

#### 200

`application/json`

Generated from the API spec. Values are representative. Unions use the first variant; deeply nested or large bodies may omit fields.

```json
{
  "has_totp_device": false,
  "totp_device_source": "string",
  "has_elevated_permissions": false,
  "elevated_permissions_expire_at": "string",
  "totp_device_source_enable_mfa_href": "string",
  "refresh_token_url": "string",
  "expires_at": "string"
}
```