Authentication API
Log In
Authenticate and obtain access tokens
POST
Authenticate with email and password to obtain access and refresh tokens.
Request Body
User email address
User password
Response
JWT access token (valid for 15 minutes)
JWT refresh token (valid for 7 days)
Access token expiration time in seconds
User object with id, email, and verification status
Errors
Invalid credentials
Account locked or email not verified
Rate limit exceeded (too many login attempts)
Security Notes
- Failed login attempts are rate-limited
- MFA may be required if enabled
- See MFA Verify if MFA is enabled