---
title: "Log in (sets refresh cookie; may require TOTP)"
method: POST
path: "/api/auth/login"
tags: ["Auth"]
---

# Log in (sets refresh cookie; may require TOTP)

`POST /api/auth/login`

## Request

- Base URL: `https://api.witwiki.app`
- URL: `https://api.witwiki.app/api/auth/login`
- Auth: none required

## Request body

- Credentials
  - `email` string, email, required
  - `password` string, password, required

## Response `200`

Session tokens, or a TOTP challenge

- LoginResult
  - `access_token` string
  - `user` User
    - `id` string
    - `email` string, email
    - `created_at` string, date-time
  - `requires_totp` boolean
  - `challenge_token` string

## Other responses

- `401`: Missing or invalid credentials

---

[API](https://skmtc.dev/witwiki/apis/witwiki-api.md) · [All operations](https://skmtc.dev/witwiki/apis/witwiki-api/llms.txt) · [OpenAPI document](https://skmtc.dev/witwiki/apis/witwiki-api/revisions/cc93279a2dff?raw)