Sign in

v1

latestOpenAPI 3.0.32026-07-26172157253.6 KB
Client

User login

Authenticates user and returns access token. For web clients, sets httpOnly refresh token cookie. For mobile/desktop/server clients, returns refreshToken in response body.

post/api/auth/sessions

Query parameters

client_type'web' | 'mobile' | 'desktop' | 'server'

Client type determines how refresh tokens are returned:

  • web: Refresh token stored in httpOnly cookie, csrfToken returned in response
  • mobile/desktop/server: refreshToken returned directly in response body

Request body

emailstring email required
passwordstring required

Response

Login successful

accessTokenstring
csrfTokenstring nullable

CSRF token for use with refresh endpoint (web clients only)

refreshTokenstring nullable

Refresh token for mobile/desktop/server clients (null for web clients)