---
title: "Log in and fetch an authentication token"
method: POST
path: "/auth/login"
tags: ["auth"]
---

# Log in and fetch an authentication token

`POST /auth/login`

This endpoint is unavailable on Cribl.Cloud.Instead, follow the instructions at https://docs.cribl.io/stream/api-tutorials/#criblcloud to get an Auth token for Cribl.Cloud.

## Request body

- LoginInfo
  - `password` string, required
  - `username` string, required

## Response `200`

Authentication token

- AuthToken
  - `forcePasswordChange` boolean, required
  - `token` string, required

## Other responses

- `401` — Invalid credentials or authentication failed
- `429` — Rate limit exceeded
- `500` — Unexpected error

## Changes

- **2026-01-19** `62472462b0c0` — 1 warning
  - the optional response header `retry-after` removed for the status `429`
  - …this revision’s changelog is incomplete
- **2025-12-01** `29638143bab3` — 1 warning
  - the optional response header `retry-after` removed for the status `429`
- **2025-11-14** `72b542d3fe49` — 4 info
  - api operation id `login` removed and replaced with `createAuthLogin`
  - added the non-success response with the status `500`
  - removed the non-success response with the status `403`
  - added the required property `forcePasswordChange` to the response with the `200` status

[Change history](https://skmtc.dev/criblio/apis/cribl-api-reference/changes/auth/login/post.md)

---

[API](https://skmtc.dev/criblio/apis/cribl-api-reference.md) · [All operations](https://skmtc.dev/criblio/apis/cribl-api-reference/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/criblio/cribl-api-reference/revisions/11df16b26c1d/schema)