---
title: "Sign In Password"
method: POST
path: "/api/auth/password"
tags: ["auth"]
---

# Sign In Password

`POST /api/auth/password`

## Request

- Base URL: `https://api.getcheapgames.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.getcheapgames.com/api/auth/password`
- Auth: none declared

Signing in with the address and the password: `ok` with the session set,
or `totp` with the challenge the code step hands back. 401
`wrong-password` for anything that is not a match, alike for every way
of not being one. An unconfirmed address signs in too: the wishlist works
before the confirmation (en.ts `auth.sentVerify`), the alerts do not.

## Response `200`

Successful Response

- GcgAccountsSchemasSignInOut: `ok` with the user and the cookies set, or `totp` with a challenge to answer.
  - `status` 'ok' | 'totp', required
  - `user` MeOut: The signed-in account, as `/api/account/me` and every sign-in answer it.
    - `id` integer, required
    - `username` string, required
    - `email` string, nullable, required
    - `emailVerified` boolean, required
    - `twoFactor` boolean, required
    - `methods` MethodsOut, required: The ways this account can sign in.
      - `password` boolean, required
      - `google` boolean, required
      - `steam` boolean, required
      - `epic` boolean, required
    - `platforms` string[], required
    - `createdAt` string, date-time, required
  - `challenge` string, nullable

---

[API](https://skmtc.dev/getcheapgames/apis/getcheapgames-api.md) · [All operations](https://skmtc.dev/getcheapgames/apis/getcheapgames-api/llms.txt) · [OpenAPI document](https://skmtc.dev/getcheapgames/apis/getcheapgames-api/revisions/57333a690301?raw)