---
title: "Get Login Methods"
method: GET
path: "/api/auth/login-methods"
tags: ["Admin"]
---

# Get Login Methods

`GET /api/auth/login-methods`

## Request

- Base URL: `https://api.xfinlab.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.xfinlab.com/api/auth/login-methods`
- Auth: none declared

Public (no admin token) -- login.html calls this on load to decide
which social/OTP login buttons to render (task #333). Only ever
exposes the 3 boolean flags plus Google's public client_id (which is
NOT a secret -- Google's own docs have every "Sign in with Google"
web integration embed it directly in page HTML/JS). Never exposes
GOOGLE_CLIENT_SECRET, LINE_CHANNEL_SECRET, or WHATSAPP_ACCESS_TOKEN.

## Response `200`

Successful Response

- unknown

---

[API](https://skmtc.dev/xfinlab/apis/xfinlab-api.md) · [All operations](https://skmtc.dev/xfinlab/apis/xfinlab-api/llms.txt) · [OpenAPI document](https://skmtc.dev/xfinlab/apis/xfinlab-api/revisions/205f85614bc6?raw)