Auth

Register a new tenant + owner user

Creates a new tenant (auto-generated slug) and an owner user, sets the JWT httpOnly cookie immediately, and sends a verification email. Rate-limited to 5 requests/hour per IP.

post/auth/register

Request

  • Base URL: http://localhost:38200
  • URL: http://localhost:38200/auth/register
  • Auth: none required

Request body

emailstring email required
passwordstring required

NIST SP 800-63B Rev.4 password-only floor. Registration always creates a brand-new user (no possible confirmed MFA row yet), so the relaxed 8-char MFA-enrolled floor never applies here. Also checked against the HIBP breached-password corpus (k-anonymity; fails open on an HIBP outage).

tenantNamestring required

Display name for the new tenant. Empty string falls back to a generated name.

turnstileTokenstring

Cloudflare Turnstile token. Required only when TURNSTILE_SECRET_KEY is configured server-side.

Response

Registered. JWT cookie set on the response.

Changes

No recorded changes to this operation across all 1 revision of this API.