v1

latestOpenAPI 3.0.0raw.githubusercontent.com2025-11-04266.5 KB

Sign in with email and password

Authenticate a user with their email and password. Returns a session object or MFA challenge if two-factor authentication is enabled.

post/signin/email-password

Request body

emailstring email required

User's email address

passwordstring required

User's password

Example request

{
  "email": "john.smith@nhost.io",
  "password": "Str0ngPassw#ord-94|%"
}

Response

Authentication successful. If MFA is enabled, a challenge will be returned instead of a session.

Example response

{
  "session": {
    "accessToken": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...",
    "accessTokenExpiresIn": 900,
    "refreshTokenId": "2c35b6f3-c4b9-48e3-978a-d4d0f1d42e24",
    "refreshToken": "2c35b6f3-c4b9-48e3-978a-d4d0f1d42e24"
  }
}
All 2 operations