POST/api/auth/login

Ingenisa umsebenzisi futhi ikhiphe i-JWT yeseshini kanye ne-refresh token. Lena ukuphela kwendlela yokuthola i-token yokufinyelela evumelekile ye-dashboard — ayikho isistimu ehlukile yokhiye be-API bonjiniyela.

Ukuqinisekisa ubunikazi nokuvikeleka

Akudingeki ukuqinisekisa ubunikazi

Ukunciphisa okwandayo kwe-brute force nge-imeyili/igama lomsebenzisi ngalinye (authGuard) -- imizamo engu-10 ehlulekile emizuzwini engu-5 iholela ekubambezelekeni okukhulayo, kusukela ku-30 kuya ekuvinjweni.

I-idempotent: Cha

Amapharamitha

identifier(body, string, kuyadingeka)— Ikheli le-imeyili noma igama lomsebenzisi
password(body, string, kuyadingeka)— Ipasiwedi

Isibonelo se-request

{"identifier":"user@example.com","password":"IphasiwediYakho"}

Isibonelo se-response

{"ok":true,"token":"<JWT, isebenza amahora angu-12>","refreshToken":"<refresh token, isebenza izinsuku ezingu-7, isetshenziswa kanye kuphela>","user":{"id":"...","tenant_id":"...","email":"user@example.com","role":"EMPLOYEE","roles":[],"permissions":[],"isMasterAdmin":false}}

Amakhodi amaphutha

401 INVALID_CREDENTIALS — I-imeyili/igama lomsebenzisi noma iphasiwedi ayilungile.
429 RATE_LIMIT_EXCEEDED — Imizamo eminingi kakhulu ehlulekile kule Identifier noma le IP.

Ubufakazi bokuhlolwa bukhoma

Impumelelo (200, i-JWT yangempela + refresh token) nesimo esibi (401 ngephasiwedi engalungile) kuqinisekiswe bukhoma ku-stack yokuhlola ehlukanisiwe.

← Ukuqinisekisa