Andrew Fletcher published: 16 May 2022 (updated) 7 June 2022 1 minute read
For an introduction into setting up RESTful hal+json refer to the set-up documentation. Also see the Query - user screen.
Login a member
POST: {domain}/user/login?_format=hal_json
Content-type: application/hal_json
Accept: application/hal+json
{
"name": "username",
"pass": "password"
}Example:
{
"name": "jacque",
"pass": "nOtmYp1ssWorD"
}Example response
{
"current_user": {
"uid": "200",
"name": "jacque"
},
"csrf_token": "kHVeh_ZWh5mwzZxrZGwc0smH3M5vfNX5C6H6oFyEVik",
"logout_token": "VGvCWlByqwU4r5d_D45t4Kj1TShDaCdNrEZZ3qtuAUQ"
}If you are using json rather than hal_json, then accordingly alter the above to match. For example
POST: {domain}/user/login?_format=json
Content-type: application/json
Accept: application/json
Logout a member
GET {domain}/user/logout?_format=json&token={token}
Content-type: text/htmlReplace {token} with your logout_token when the respective user logged in... for example
{
"logout_token": "VGvCWlByqwU4r5d_D45t4Kj1TShDaCdNrEZZ3qtuAUQ"
}As noted from the example above.
Retrieve a user's details
GET {domain}/user/{uid}?_format=hal_jsonFor more details regarding retrieving a user's details go to Query - user.
Recover / change a user's password
Have read through this article - How to recover or change or reset your password using REST.
Check if a user is logged in or not
To confirm a user is logged in use:
GET {domain}/user/login_status?_format=jsonIf the user is logged in the response will be
1Otherwise, a non logged user will be
0
Related articles
Andrew Fletcher
•
09 Jan 2026
Upgrading Drupal from 10.6.x to 11.3.2: a practical, dependency-driven walkthrough
Upgrading from Drupal 10.6.x to 11.3.x is officially supported, but in real projects it’s rarely a single command. The friction usually comes from **Composer constraints**, not Drupal itself.This article documents a real-world upgrade path from Drupal 10.6.1 → 11.3.2, including the specific blockers...
Andrew Fletcher
•
04 Apr 2025
Managing .gitignore changes
When working with Git, the .gitignore file plays a critical role in controlling which files and folders are tracked by version control. Yet, many developers are unsure when changes to .gitignore take effect and how to manage files that are already being tracked. This uncertainty can lead to...
Andrew Fletcher
•
26 Mar 2025
How to fix the ‘Undefined function t’ error in Drupal 10 or 11 code
Upgrading to Drupal 10.4+ you might have noticed a warning in their code editor stating “Undefined function ‘t’”. While Drupal’s `t()` function remains valid in procedural code, some language analysis tools — such as Intelephense — do not automatically recognise Drupal’s global functions. This...