---
title: "Admin portal: password step. Returns a 2FA challenge, never a token."
method: POST
path: "/api/auth/admin/login"
tags: ["Admin portal auth"]
---

# Admin portal: password step. Returns a 2FA challenge, never a token.

`POST /api/auth/admin/login`

## Request

- Base URL: `https://api.rewritelifestyle.ai` (the document declares no server; this is the origin it was published from)
- URL: `https://api.rewritelifestyle.ai/api/auth/admin/login`
- Auth: none declared

## Request body

- LoginDto
  - `email` string, required
  - `password` string, required

## Response `200`

## Changes

- **2026-11-07** `0ddc49451c22`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/rewritelifestyle/apis/rewrite-lifestyle-api/changes/api/auth/admin/login/post.md)

---

[API](https://skmtc.dev/rewritelifestyle/apis/rewrite-lifestyle-api.md) - [All operations](https://skmtc.dev/rewritelifestyle/apis/rewrite-lifestyle-api/llms.txt) - [OpenAPI document](https://skmtc.dev/rewritelifestyle/apis/rewrite-lifestyle-api/revisions/0d22636dfcb9?raw)