Authentication

Allow a user to log in and receive a JWT Token. (Roles: user, none)

post/login

Request body

emailstring required
passwordstring required

Response

Success

tokenstring
registeredboolean
magic_link_sentboolean
magic_link_messagestring
two_factor_requiredboolean

Credentials were accepted but the account has 2FA enabled, so no token is issued. Exchange the challenge_ticket for a full payload via /auth/2fa/verify.

challenge_ticketstring

Single-use, short-lived ticket identifying the pending 2FA challenge.

two_factor_methodsstring[]

Second factors the user can present for this challenge.

Changes

No recorded changes to this endpoint across all 8 revisions of this API.