---
title: "Admin Login"
method: POST
path: "/api/v1/quick-spaces/admin/login"
tags: ["quickSpaces", "quickSpaces"]
---

# Admin Login

`POST /api/v1/quick-spaces/admin/login`

The only unauthenticated route on this lane. Throttled per client IP AND per username; the
failure reply never says which half of the credential was wrong.

## Request body

- AdminLoginRequestDTO — The only body on this lane that carries a secret. Never logged, never echoed back.
  - `username` string, required
  - `password` string, required

## Response `200`

Successful Response

- AdminLoginResponseDTO
  - `token` string, required
  - `username` string, required
  - `expires_at` string, date-time, required

## Other responses

- `422` — Validation Error

## Changes

- **2026-09-02** `ff7f2b621b41` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/brandbooster/apis/fastapi/changes/api/v1/quick-spaces/admin/login/post.md)

---

[API](https://skmtc.dev/brandbooster/apis/fastapi.md) · [All operations](https://skmtc.dev/brandbooster/apis/fastapi/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/brandbooster/fastapi/revisions/ff7f2b621b41/schema)