---
title: "Mobile Login"
method: POST
path: "/api/v3/auth/mobile"
tags: ["Mobile Authentication"]
---

# Mobile Login

`POST /api/v3/auth/mobile`

## Request

- Base URL: `https://api.endless.health` (the document declares no server; this is the origin it was published from)
- URL: `https://api.endless.health/api/v3/auth/mobile`
- Auth: none declared

Mobile login: Firebase ID token + explicit site_id (no Origin/Referer).

Returns access JWT (2 weeks, typ=mobile). Does not set the web __session cookie.

## Request body

- MobileSessionCreationRequestSchema
  - `firebase_token` string, required
  - `site_id` integer, required
  - `locale` 'en' | 'es'

## Response `200`

Successful Response

- UserMobileLoginResponseSchema
  - `id` integer, required
  - `email` string, required
  - `site_id` integer, required
  - `organization_identifier` string, required
  - `first_name` string, nullable, required
  - `last_name` string, nullable, required
  - `is_superuser` boolean
  - `roles` string[]
  - `permissions` string[]
  - `is_staff` boolean, nullable
  - `is_physician` boolean, nullable
  - `is_kit_assembly` boolean, nullable
  - `locale` string, nullable, required
  - `has_pending_token` boolean, nullable
  - `features` object, nullable
  - `access_token` string, required

## Other responses

- `404`: Not found
- `422`: Validation Error

---

[API](https://skmtc.dev/endless/apis/eh-core-v3-api-prod.md) - [All operations](https://skmtc.dev/endless/apis/eh-core-v3-api-prod/llms.txt) - [OpenAPI document](https://skmtc.dev/endless/apis/eh-core-v3-api-prod/revisions/9046a1eb2d0c?raw)