---
title: "Authenticate user"
method: POST
path: "/auth/login"
tags: ["auth"]
---

# Authenticate user

`POST /auth/login`

## Request body

- object
  - `username` string, required
  - `password` string, password, required
  - `twoFactorCode` string, required

## Response `200`

Login successful

- object
  - `token` string
  - `user` User
    - `id` string
    - `username` string
    - `email` string, email
    - `role` 'admin' | 'moderator' | 'viewer'
    - `status` 'active' | 'inactive'
    - `lastLogin` string, date-time

## Other responses

- `401` — Authentication failed

---

[API](https://skmtc.dev/tinyactive/apis/nginx-modsecurity-admin-portal-api.md) · [All operations](https://skmtc.dev/tinyactive/apis/nginx-modsecurity-admin-portal-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/tinyactive/nginx-modsecurity-admin-portal-api/revisions/9df19884247b/schema)