---
title: "Authenticate and receive a JWT token pair"
method: POST
path: "/api/v1/login"
tags: ["Authentication"]
---

# Authenticate and receive a JWT token pair

`POST /api/v1/login`

Authenticates a company group using its identifier and auth token. Returns a short-lived JWT access token and an opaque refresh token. The access token must be sent as a Bearer token in subsequent requests.

## Request body

- object
  - `identifier` string, required — Unique identifier (slug) of the company group
  - `auth_token` string, uuid, required — Secret authentication token of the company group

## Response `200`

Authenticated successfully

- object
  - `access_token` string, required — Short-lived JWT access token
  - `refresh_token` string, required — Opaque refresh token for renewing the session
  - `token_type` string, required
  - `expires_in` integer, required — Access token TTL in seconds (default 86400 = 24 hours)
  - `company_group` object, required
    - `id` integer, required
    - `identifier` string, required
    - `slug` string, required

## Other responses

- `400` — Missing required parameters
- `401` — Invalid credentials
- `429` — Too many requests — rate limit exceeded (10 attempts/minute per IP)

---

[API](https://skmtc.net/totalpass/apis/token-use.md) · [All operations](https://skmtc.net/totalpass/apis/token-use/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/totalpass/token-use/versions/bc65b4950c7e/schema)