Sign in

v47

latestOpenAPI 3.0.3MIT Licenseraw.githubusercontent.com2026-08-015915132.9 KB
auth

Issues access and refresh tokens based on grant type.

post/token

Query parameters

grant_type'password' | 'refresh_token' | 'id_token' | 'pkce' | 'web3' required
  • What grant type should be used to issue an access and refresh token. Note: id_token is only offered in experimental mode.
  • CAPTCHA protection does not apply on the refresh_token grant flow.
  • Using password is akin to a user signing in.
  • pkce is used for exchanging the authorization code for a pair of access and refresh tokens.

Request body

refresh_tokenstring
passwordstring
emailstring email
phonestring phone
id_tokenstring
access_tokenstring

Provide only when grant_type is id_token and the provided ID token requires the presence of an access token to be accepted (usually by having an at_hash claim).

noncestring
provider'google' | 'apple' | 'azure' | 'facebook' | 'keycloak'
client_idstring
issuerstring

If provider is azure then you can specify any Azure OIDC issuer string here, which will be used for verification.

auth_codestring uuid
code_verifierstring
messagestring

Signed message for Web3 authentication following the Sign in with Solana (SIWS) or Sign in with Ethereum (SIWE) standard. Must include: Issued At, URI, Version.

signaturestring

The signature of the message for Web3 authentication. For Solana: Base64 or Base64-URL encoded. For Ethereum: hexadecimal string with 0x prefix.

chain'solana' | 'ethereum'

What blockchain is the Web3 message and signature for.

Example request

{
  "chain": "solana"
}

Response

An access and refresh token have been successfully issued.

access_tokenstring

A valid JWT that will expire in expires_in seconds.

refresh_tokenstring

An opaque string that can be used once to obtain a new access and refresh token.

token_typestring

What type of token this is. Only bearer returned, may change in the future.

expires_ininteger

Number of seconds after which the access_token should be renewed by using the refresh token with the refresh_token grant type.

expires_atinteger

UNIX timestamp after which the access_token should be renewed by using the refresh token with the refresh_token grant type.

All 59 operations