---
title: "Authenticate user"
method: POST
path: "/auth/login"
tags: ["Auth"]
---

# Authenticate user

`POST /auth/login`

## Request

- Base URL: `https://api.openobserve.ai` (the document declares no server; this is the origin it was published from)
- URL: `https://api.openobserve.ai/auth/login`
- Auth: none required
- TypeScript: <https://skmtc.dev/openobserve/apis/openobserve-api-http/docs/auth/login/post.ts> (a function with typed inputs; its response is checked against the schema)

Authenticates user credentials and returns authentication tokens stored in secure HTTP-only cookies. Supports both JSON request body authentication and Authorization header-based authentication. Successful authentication establishes a session that allows access to protected resources and APIs throughout the platform.

## Request body

- SignInUser
  - `name` string, required
  - `password` string, required

## Response `200`

Success

- object
  - `lockout_retry_after_secs` integer, nullable: Seconds until a locked-out account may try again, present only on that refusal. The number rather than a sentence, so the console can render it in the viewer's own language.
  - `message` string, required
  - `password_rotation_warning` integer, nullable: Days left before the caller's password expires, present only inside the rotation warning window. Advisory: a client that ignores it is never broken by one.
  - `status` boolean, required

---

[API](https://skmtc.dev/openobserve/apis/openobserve-api-http.md) - [All operations](https://skmtc.dev/openobserve/apis/openobserve-api-http/llms.txt) - [OpenAPI document](https://skmtc.dev/openobserve/apis/openobserve-api-http/revisions/0529b8a10252?raw)