v1

latestOpenAPI 3.0.32026-07-26172157253.6 KB

Admin

Update authentication configuration

Update authentication settings (admin only)

put/api/auth/config

Request body

requireEmailVerificationboolean

Enabling this requires custom SMTP or a managed email provider.

passwordMinLengthinteger

requireNumberboolean

requireLowercaseboolean

requireUppercaseboolean

requireSpecialCharboolean

verifyEmailMethod'code' | 'link'

Method for email verification (code = 6-digit OTP, link = magic link)

resetPasswordMethod'code' | 'link'

Method for password reset (code = 6-digit OTP + exchange flow, link = magic link)

allowedRedirectUrlsstring[]

List of allowed URLs for authentication redirects. If empty, all redirects are allowed for smoother development UX. This is not recommended in production.

disableSignupboolean

When true, public sign-up endpoints (POST /api/auth/users and first-time OAuth) are rejected with 403 AUTH_SIGNUP_DISABLED. Admin-authenticated user creation is unaffected.

Response

Configuration updated successfully

idstring uuid