Sign in
auth

Login with the Privy access token

Accepts the token from the privy-token cookie or an Authorization: Bearer header. The cookie takes precedence; the bearer header is a permanent path for mobile and the admin app. The body is the GET /auth/session payload, plus jwt for bearer clients.

post/auth/login

Headers

x-dre-auth-modestring

Set to cookie to receive the session as Set-Cookie: __Host-dre-session plus an X-CSRF-Token response header, with no jwt in the body. Omit for the bearer response.

Request body

LoginDto required

Response

Login successful

idnumber required

DRE user id

walletstring required

Wallet address this session is bound to

rolesnumber[] required

Role ids held by the user

status'active' | 'profile_required' | 'beta_required' required

Which gate the user is behind. profile_required takes precedence over beta_required.

jwtstring

JWT for bearer clients (mobile, admin). Omitted for cookie clients.

Changes