---
title: "Create session (login)"
method: POST
path: "/auth/sessions"
tags: ["Auth"]
---

# Create session (login)

`POST /auth/sessions`

## Request body

- LoginRequest
  - `username` string, required
  - `password` string, required — User password (not the default bootstrap password unless configured explicitly)
  - `type` 'internal' | 'ldap' — Password backend — internal (DuckDB users / admin hash) or ldap when LDAP is enabled.
  - `remember` boolean — When true, the UI may persist data.token in localStorage (Remember me). HttpOnly cookie is always set when cookie_enable is true.

## Response `201`

Session created

- LoginResponse
  - `data` object
    - `token` string — JWT token
    - `scope` string
    - `user` object
      - `admin` boolean
  - `meta` Meta
    - `request_id` string
    - `trace_id` string
    - `pagination` Pagination
      - `limit` integer
      - `next_cursor` string
      - `prev_cursor` string
      - `total` integer
      - `has_more` boolean
    - `message` string

## Other responses

- `400` — Bad request
- `401` — Unauthorized
- `500` — Server error

---

[API](https://skmtc.net/sipcapture/apis/homer-next-gen-api.md) · [All operations](https://skmtc.net/sipcapture/apis/homer-next-gen-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/sipcapture/homer-next-gen-api/versions/1966dd0df318/schema)