v1

latestOpenAPI 3.1.0raw.githubusercontent.com2026-03-02333644.7 KB

Auth

Authenticate (login)

Create a new session with password credentials. If MFA is required, mfaRequired: true is returned and the token is limited until MFA verification via /auth/factors/:id/verify.

post/api/cis/v1/auth/sessions

Headers

x-tenant-idstring required

Request body

identityIdstring uuid required

passwordstring password required

Response

Session created

sessionIdstring uuid

accessTokenstring

JWT (HS256 or ES256)

expiresIninteger

Token TTL in seconds

refreshTokenstring

mfaRequiredboolean

True if MFA step is needed before full access