---
title: "User login with username and password"
method: POST
path: "/login"
tags: ["Authentication"]
---

# User login with username and password

`POST /login`

Get access token via username and password authentication.
The client must present Bearer token to access the protected API endpoints.The Bearer token should be present in the "Authorization" request header field and use the "Bearer" HTTP authentication scheme to transmit the access token.

## Request body

- XiqLoginRequest
  - `username` string, required — The login username
  - `password` string, required — The login password
  - `rate_limit` XiqRateLimitPolicy — The rate limit policy for the API token
    - `hour` integer, required — The sustained request quota per hour. Defines the baseline traffic capacity.
    - `second` integer — The maximum burst allowance per second. If omitted, no short-term throttling is applied.

## Response `200`

Successful operation

- XiqLoginResponse
  - `access_token` string, required — The access token with JWT format issued by ExtremeCloud IQ
  - `token_type` string, required — The type of token, only supports "Bearer" currently
  - `expires_in` integer, required — The lifetime in seconds of the access token

## Other responses

- `400` — Bad request
- `401` — UNAUTHORIZED

---

[API](https://skmtc.net/extremecloudiq/apis/extremecloud-iq-api.md) · [All operations](https://skmtc.net/extremecloudiq/apis/extremecloud-iq-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/extremecloudiq/extremecloud-iq-api/versions/5ff7ab84e8e8/schema)