Sign in

v34

latestOpenAPI 3.1.0raw.githubusercontent.com2026-01-2166128239.1 KB
user

Login User

Login with Ed25519 signature verification (local or SSO).

Authentication flow:

  1. Client derives Ed25519 keypair from password
  2. Client signs "email|timestamp" with Ed25519 private key
  3. Server verifies signature using stored Ed25519 public key
  4. Server encrypts response with stored X25519 public key

For SSO users: Also validates SSO token before proceeding.

Returns encrypted login response that only the correct password can decrypt.

post/api/user/login

Request body

emailstring email required
signaturestring required
timestampinteger required
sso_tokenstring nullable

Response

Successful Response

access_tokenstring required
session_keystring required