--- a/mod_http_admin_api/mod_http_admin_api.lua	Wed Feb 22 22:47:45 2023 -0500
+++ b/mod_http_admin_api/mod_http_admin_api.lua	Sat May 06 19:40:23 2023 -0500
@@ -1,5 +1,6 @@
 local usermanager = require "core.usermanager";
 
+local jid = require "util.jid";
 local it = require "util.iterators";
 local json = require "util.json";
 local st = require "util.stanza";
@@ -48,6 +49,9 @@
 			event.response.headers.authorization = www_authenticate_header;
 			return false, 401;
 		end
+		-- FIXME this should probably live in mod_tokenauth or similar
+		session.type = "c2s";
+		session.full_jid = jid.join(session.username, session.host, session.resource);
 		event.session = session;
 		if not module:may(":access-admin-api", event) then
 			return false, 403;