console

Login

用户名+密码 → 控制台会话令牌。

失败不区分"用户不存在"与"密码错"——否则等于白送一个用户名枚举接口。

限流按 (来源IP, 账号) + 来源IP 两个维度，刻意不按账号单独计：那会变成 "任何知道 ADMIN_USER 的人都能把你永久锁在控制台外面"的 DoS。见 app/auth/ratelimit。

post/console/login

Request

  • Base URL: https://api.agent4.io (the document declares no server; this is the origin it was published from)
  • URL: https://api.agent4.io/console/login
  • Auth: none declared

Request body

usernamestring required
passwordstring required

Response

Successful Response

tokenstring required
rolestring required
subjectstring required
tenant_idstring nullable

Changes

No recorded changes to this operation across all 1 revision of this API.