Auth

Authenticate user

Authenticates user credentials and returns authentication tokens stored in secure HTTP-only cookies. Supports both JSON request body authentication and Authorization header-based authentication. Successful authentication establishes a session that allows access to protected resources and APIs throughout the platform.

post/auth/login

Request

Request body

namestring required
passwordstring required

Response

Success

lockout_retry_after_secsinteger nullable

Seconds until a locked-out account may try again, present only on that refusal. The number rather than a sentence, so the console can render it in the viewer's own language.

messagestring required
password_rotation_warninginteger nullable

Days left before the caller's password expires, present only inside the rotation warning window. Advisory: a client that ignores it is never broken by one.

statusboolean required

Changes

No recorded changes to this operation across all 1 revision of this API.