Lock the panel (screen lock)

POST 
/api/session/lock

Marks the CURRENT session locked. From that point the API answers 423 to everything except /api/me, /api/session/unlock, /api/session/lock and /api/logout — so the lock is the server's, not a screen the browser could dismiss.

Called by the panel's idle timer or by the user asking for it. The timer may only ever lock EARLY: a tab whose timer never fired still meets the lock the moment it speaks to the server.

Responses

200

The panel is locked.

401

Not authenticated. code: account_disabled means the member's seat was deactivated in this workspace: the session is over even though the token was not revoked (clients sign out and clean up).