---
title: "Log in."
method: POST
path: "/auth/login.json"
tags: ["Authentication (GPGAuth)"]
---

# Log in.

`POST /auth/login.json`

## Request

- Base URL: `https://passbolt.local`
- URL: `https://passbolt.local/auth/login.json`
- Auth: none required
- TypeScript: <https://skmtc.dev/passbolt/apis/passbolt-api/docs/auth/login.json/post.ts> (a function with typed inputs; its response is checked against the schema)

## Request body

- Login
  - `data` object, required
    - `gpg_auth` object, required
      - `keyid` string, required
      - `server_verify_token` string: Used for server key verification.
      - `user_token_result` string: Used for client key verification.

## Response `200`

Operation is successful. Additional data is sent through cookie and headers.

- object
  - `header` Header, required
    - `id` string, uuid, required
    - `status` 'success' | 'error', required
    - `servertime` integer, required
    - `action` string, uuid, required
    - `message` string, required
    - `url` string, uri, required
    - `code` integer, required
  - `body` unknown, required

## Other responses

- `400`: Bad request

---

[API](https://skmtc.dev/passbolt/apis/passbolt-api.md) - [All operations](https://skmtc.dev/passbolt/apis/passbolt-api/llms.txt) - [OpenAPI document](https://skmtc.dev/passbolt/apis/passbolt-api/revisions/8d72215e2274?raw)
