ARarbicity
user

Login User

Changed on

Login with Ed25519 signature verification (local or SSO).

Authentication flow:

  1. Client derives Ed25519 keypair from password
  2. Client signs "email|timestamp" with Ed25519 private key
  3. Server verifies signature using stored Ed25519 public key
  4. Server encrypts response with stored X25519 public key

For SSO users: Also validates SSO token before proceeding.

Returns encrypted login response that only the correct password can decrypt.

post/api/user/login

Request

  • The document declares no server URL.
  • Auth
    HTTP bearer

Request body

emailstring email required
signaturestring required
timestampinteger required
sso_tokenstring nullable

Response

Successful Response

access_tokenstring required
session_keystring required

Changes

  • aa4b06f8dedeRevision changes
    • breaking

      added the new required request property

    • breaking

      added the new required request property

    • warning

      removed the request property

    • info

      added the required property to the response with the status

    • info

      added the required property to the response with the status

    • info

      added the required property to the response with the status

  • 849d5e8732f6Revision changes
    • breaking

      added the new required request property

    • breaking

      removed the required property from the response with the status

    • breaking

      removed the required property from the response with the status

    • breaking

      removed the required property from the response with the status

    • warning

      removed the request property

    • info

      added the new optional request property