Auth - Login

Body: {username, password}. Success mints an admin-audience JWT (8h TTL default), sets it as an httpOnly + SameSite=Lax cookie, stamps date_last_login on the admin_user row, and returns the admin's public profile. Failures return 401 with a generic "Invalid credentials." message — same response for unknown username and wrong password to avoid user enumeration.

post/admin/v1/auth/login

Request

Base URL: https://api.juju.com
URL: https://api.juju.com/admin/v1/auth/login
Auth: none declared

Request body

usernamestring required

passwordstring required

Example request

{
  "username": "brooke",
  "password": "correct-horse-battery-staple"
}

Response

metaobject required

Pagination and context metadata. Always present, empty object ({}) when no metadata applies to the response.

errorsstring[] required

Empty array on success. On failure, human-readable error strings suitable for surfacing to end users.

Example response

{
  "data": {
    "role": "admin"
  },
  "errors": []
}

Changes

No recorded changes to this operation across all 1 revision of this API.