auth

Login with email + password, receive JWT access token.

Verify email + argon2id password, issue JWT HS256 access token.

Returns constant-time 401 for both wrong email and wrong password to prevent user enumeration.

post/v1/auth/login

Request

  • Base URL: https://api.andish.ru (the document declares no server; this is the origin it was published from)
  • URL: https://api.andish.ru/v1/auth/login
  • Auth: none declared

Request body

emailstring email required

Registered email address.

passwordstring required

Plain-text password for verification.

Response

Successful Response

access_tokenstring required

JWT HS256 access token (TTL 12h).

token_typestring

Always 'bearer'.

user_idstring uuid required

Authenticated user UUID.

tenant_idstring uuid required

Tenant UUID for this user.

Changes

No recorded changes to this operation across all 1 revision of this API.