Users

Login User

Authenticate user and return the access token.

The refresh token is delivered as an httpOnly cookie (refresh_token, path /v1/users/auth/login/refresh, SameSite=Lax, Secure in production) so SPA frontends can keep the access token in memory while letting the browser handle refresh transport.

Requires a Cloudflare Turnstile token in the X-Turnstile-Token header when bot protection is enabled.

post/v1/users/auth/login

Request

  • Base URL: https://api.fettle.sh (the document declares no server; this is the origin it was published from)
  • URL: https://api.fettle.sh/v1/users/auth/login
  • Auth: none declared

Headers

X-Turnstile-Tokenstring nullable

Request body

emailstring email required
passwordstring required

Response

Successful Response

access_tokenstring required

Changes

No recorded changes to this operation across all 1 revision of this API.