Auth

Auth - Login

Body: {username, password}. Success mints a sponsor-audience JWT (12h TTL default), sets it as an httpOnly + SameSite=Lax + Secure cookie, stamps date_last_login on the sponsor_login row, and returns the sponsor's public profile — including the parent job_partner and optional job_provider sub-account scoping. Failures return 401 with a generic "Invalid credentials." message — same response for unknown username and wrong password to avoid user enumeration.

post/sponsor/v1/auth/login

Request

  • Base URL: https://api.juju.com
  • URL: https://api.juju.com/sponsor/v1/auth/login
  • Auth: none declared

Request body

usernamestring required
passwordstring required

Example request

{
  "username": "jane.doe",
  "password": "correct-horse-battery-staple"
}

Response

Login succeeded. Session cookie set on response.

metaobject required

Pagination and context metadata. Always present, empty object ({}) when no metadata applies to the response.

errorsstring[] required

Empty array on success. On failure, human-readable error strings suitable for surfacing to end users.

Example response

{
  "errors": []
}

Changes

No recorded changes to this operation across all 1 revision of this API.