---
title: "HMAC Login"
method: GET
path: "/v1/users/hmac/login"
tags: ["session-management"]
---

# HMAC Login

`GET /v1/users/hmac/login`

## Request

- Base URL: `https://api.exchange.bullish.com/trading-api`
- URL: `https://api.exchange.bullish.com/trading-api/v1/users/hmac/login`
- Auth: none required
- TypeScript: <https://skmtc.dev/bullish/apis/bullish-trading-api/docs/v1/users/hmac/login/get.ts> (a function with typed inputs; its response is checked against the schema)

Login and generate a new session associated with a JWT using HMAC. Once you log in from an IP, the same IP must
be used for the duration of the session for any subsequent requests.

**Ratelimited:** `True`

## Headers

- `BX-SIGNATURE` string, required
- `BX-TIMESTAMP` string, required
- `BX-NONCE` string, required
- `BX-PUBLIC-KEY` string, required

## Response `200`

returns JWT and the `authorizer` for signing requests

- LoginResponse
  - `authorizer` string, string, required: JWT authorizer you obtain along with the [JWT token](/rest/authentication#generate-a-jwt-token)
  - `token` string, string, required: JWT token

## Other responses

- `400`: Bad Request
- `401`: Not Authenticated
- `403`: Access Forbidden
- `429`: Too Many Requests
- `500`: Internal Server Error

---

[API](https://skmtc.dev/bullish/apis/bullish-trading-api.md) - [All operations](https://skmtc.dev/bullish/apis/bullish-trading-api/llms.txt) - [OpenAPI document](https://skmtc.dev/bullish/apis/bullish-trading-api/revisions/df5d69ccedcf?raw)