Skip to main content
POST
Authenticate with email and password to obtain access and refresh tokens.

Request Body

string
required
User email address
string
required
User password

Response

string
JWT access token (valid for 15 minutes)
string
JWT refresh token (valid for 7 days)
integer
Access token expiration time in seconds
object
User object with id, email, and verification status

Errors

object
Invalid credentials
object
Account locked or email not verified
object
Rate limit exceeded (too many login attempts)

Security Notes

  • Failed login attempts are rate-limited
  • MFA may be required if enabled
  • See MFA Verify if MFA is enabled