USusememos
AuthService

POST /api/auth/signin

Changed on

SignIn authenticates a user with password or SSO credentials. On success, returns a short-lived access token and sets a refresh token in an HttpOnly cookie. Public. Attempts are rate limited. Archived users cannot sign in.

Request

  • The document declares no server URL.
  • Auth
    none declared

Request body

Response

OK

accessTokenstring

The short-lived access token for API requests. Keep it in memory only, not in localStorage.

accessTokenExpireTimestring date-time

When the access token expires. Call RefreshToken before this time.

Changes