---
title: "Login Secure"
method: POST
path: "/api/v1/auth/login-secure"
tags: ["Authentication"]
---

# Login Secure

`POST /api/v1/auth/login-secure`

## Request

- Base URL: `https://geo.sig.ai` (the document declares no server; this is the origin it was published from)
- URL: `https://geo.sig.ai/api/v1/auth/login-secure`
- Auth: none declared

Secure login with httpOnly cookies.

Sets two cookies:
- access_token: Short-lived (15 minutes), httpOnly, secure, sameSite=strict
- refresh_token: Long-lived (7 days), httpOnly, secure, sameSite=strict

Also creates a UserSession database record for session tracking.

Rate limited to 5 attempts per minute per IP to prevent brute force attacks.

## Request body

- LoginRequest: Login request body.
  - `email` string, email, required
  - `password` string, required

## Response `200`

Successful Response

- unknown

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/sig/apis/ai-visibility-intelligence-api.md) · [All operations](https://skmtc.dev/sig/apis/ai-visibility-intelligence-api/llms.txt) · [OpenAPI document](https://skmtc.dev/sig/apis/ai-visibility-intelligence-api/revisions/3ec39f9be9e0?raw)