---
title: "Sign in with email and password"
method: POST
path: "/signin/email-password"
---

# Sign in with email and password

`POST /signin/email-password`

## Request

- The document declares no server URL.
- Auth: none declared

Authenticate a user with their email and password. Returns a session object or MFA challenge if two-factor authentication is enabled.

## Request body

- SignInEmailPasswordRequest: Request to authenticate using email and password
  - `email` string, email, required: User's email address
  - `password` string, required: User's password

## Response `200`

Authentication successful. If MFA is enabled, a challenge will be returned instead of a session.

- SignInEmailPasswordResponse: Response for email-password authentication that may include a session or MFA challenge
  - `session` Session: User authentication session containing tokens and user information
    - `accessToken` string, required: JWT token for authenticating API requests
    - `accessTokenExpiresIn` integer, required: Expiration time of the access token in seconds
    - `refreshTokenId` string, required: Identifier for the refresh token
    - `refreshToken` string, required: Token used to refresh the access token

## Other responses

- `default`: An error occurred while processing the request

---

[API](https://skmtc.dev/nhost/apis/nhost-example-api.md) - [All operations](https://skmtc.dev/nhost/apis/nhost-example-api/llms.txt) - [OpenAPI document](https://skmtc.dev/nhost/apis/nhost-example-api/revisions/2fcd41e5f405?raw)