Auth

Login

Authenticate with username and password, receive a JWT token.

GH-1302: a caller sending X-GeoLens-Auth-Mode: cookie receives the refresh token as an httpOnly cookie and a null refresh_token in the body. Without that header the response is unchanged, which is what keeps the CLI, the generated SDKs, Postman, and CI logins working.

post/auth/login

Request

  • The document declares no server URL.
  • Auth: none declared

Headers

X-GeoLens-Auth-Modestring nullable

Browser session-transport negotiation. Send cookie to carry the refresh token in an httpOnly geolens_refresh cookie, paired with a script-readable geolens_csrf cookie, and receive a null refresh_token in the response body. When the header is absent (the default) the refresh token is returned in the response body, which is the contract every non-browser caller uses.

Response

Successful Response

access_tokenstring required

JWT access token for Authorization header

refresh_tokenstring nullable required

Opaque token used to obtain a new access token. Always present for programmatic callers (CLI, SDKs, CI). Null when the caller opted into the browser cookie flow with 'X-GeoLens-Auth-Mode: cookie', in which case the token is delivered as an httpOnly cookie instead (GH-1302).

token_typestring
expires_ininteger required

Seconds until the access token expires

Changes

No recorded changes to this operation across all 50 revisions of this API.