POST/api/auth/login

Inopinza mushandisi uye inopa Session-JWT pamwe neRefresh-Token. Iyi ndiyo nzira chete yekuwana token yemukana inoshanda yedashboard — hapana sisitimu yakaparadzana yeDeveloper-API-Key.

Kusimbiswa nekuchengetedza

Hapana kusimbiswa kunodiwa

Kunonoka kunowedzera kwekudzivirira brute-force pa email/zita remushandisi (authGuard) -- kuedza kwakakundikana 10 mumaminitsi 5 kunoita kuti pave nekunonoka kunowedzera, kubva pa 30 kuvharirwa.

Idempotent: Kwete

Maparameter

identifier(body, string, zvinodiwa)— Kero yeemail kana zita remushandisi
password(body, string, zvinodiwa)— Pasiwedhi

Muenzaniso wechikumbiro

{"identifier":"user@example.com","password":"PasswordYenyu"}

Muenzaniso wemhinduro

{"ok":true,"token":"<JWT, inoshanda 12h>","refreshToken":"<Refresh token, inoshanda mazuva 7, inoshandiswa kamwe chete>","user":{"id":"...","tenant_id":"...","email":"user@example.com","role":"EMPLOYEE","roles":[],"permissions":[],"isMasterAdmin":false}}

Makodhi ekukanganisa

401 INVALID_CREDENTIALS — Email/zita remushandisi kana pasiwedhi hazvina kururama.
429 RATE_LIMIT_EXCEEDED — Kuedza kwakakundikana kwakawandisa kwe-identifier iyi kana IP iyi.

Humbowo hwemuedzo weLive

Kubudirira (200, JWT chaiyo + Refresh-Token) nenyaya isina kunaka (401 pasiwedhi isiri iyo) zvakasimbiswa panguva chaiyo pa test-stack yakaparadzaniswa.

← Kusimbisa kuzivikanwa