v1

latestOpenAPI 3.1.02026-08-045217107.2 KB
Auth

Login

Authenticate with email and password. Returns a JWT access token and sets a HttpOnly refresh token cookie. Rate limited to 5 requests/minute per IP.

post/auth/login

Request body

emailstring email required
passwordstring required

Response

Login successful. refresh_token set as HttpOnly cookie.

successboolean
accessTokenstring

JWT access token (15 min expiry). Store in memory only.

messagestring

Example response

{
  "success": true
}