Auth

Create an opaque Web session

Sets the Secure, HttpOnly __Host-fd_session cookie. Pending accounts receive a restricted email_verification Session for the verification dashboard. Eligible verified accounts receive their one-time Trial Credits on login if not already granted. An active account receives a full Session unless its migrated identity still requires a current legal acceptance, in which case it receives a restricted legal_acceptance Session. An account with a scheduled deletion request receives a restricted deletion_recovery Session. Accounts whose deletion is processing/failed/completed, and suspended accounts, receive 403.

post/auth/login

Request

  • Base URL: https://api.flashdata.dev/v2
  • URL: https://api.flashdata.dev/v2/auth/login
  • Auth: none required

Request body

emailstring email required
passwordstring required
rememberMeboolean

Ignored for email_verification, legal_acceptance and deletion_recovery Sessions, which always use a short fixed expiry.

Response

Authenticated

csrfTokenstring required
sessionMode'full' | 'email_verification' | 'legal_acceptance' | 'deletion_recovery' required

Changes

No recorded changes to this operation across all 1 revision of this API.