api rest check credentials

[elbowprogrammer]

Using api guide on GitHub I was able to get a token and data via rest api. If I want to create an app that pulls that data from espo, how would I go about verifying the user, and check if user is logged into their espocrm?

[yuri]

There is no certain criteria that defines that user is logged. If access token for a specific user exists and last access date is recent it means that user "online".

[elbowprogrammer]

Verifying that "John" (random name) from espo is the same guy as "John" from my app (using a software and its api to create an app) is an issue to figure out.