---
title: "Login"
method: POST
path: "/login"
tags: ["oauth"]
---

# Login

`POST /login`

## Request

- Base URL: `https://www.tandem-cc.com` (the document declares no server; this is the origin it was published from)
- URL: `https://www.tandem-cc.com/login`
- Auth: none declared

Create a session cookie from a valid bearer token.

Body:
  {
    "token": "tandem_..."           # existing bearer (admin-issued
                                    # OR OAuth-issued — both work)
  }

Sets a HttpOnly Secure SameSite=Lax cookie on success. Returns
{"ok": true, "handle": "..."}; the page is responsible for
navigating to wherever ?next= said to go (consent UI by default).

## Request body

- object

## Response `200`

Successful Response

- unknown

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/tandem-cc/apis/tandem-api.md) · [All operations](https://skmtc.dev/tandem-cc/apis/tandem-api/llms.txt) · [OpenAPI document](https://skmtc.dev/tandem-cc/apis/tandem-api/revisions/3b804877b47c?raw)