> ## Documentation Index
> Fetch the complete documentation index at: https://docs.gosentrix.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication

> Learn how to authenticate with the GoSentrix API

All API requests require authentication. GoSentrix uses JWT (JSON Web Tokens) for authentication.

## Authentication Flow

1. **Sign Up** or **Log In** to obtain access and refresh tokens
2. **Use Access Token** in the `Authorization` header for API requests
3. **Refresh Token** when the access token expires

## Obtaining Tokens

### Sign Up

<RequestExample>
  ```bash theme={null}
  curl -X POST https://api.gosentrix.io/api/v1/auth/signup \
    -H "Content-Type: application/json" \
    -d '{
      "email": "user@example.com",
      "password": "SecurePassword123!",
      "tenant_name": "My Company"
    }'
  ```
</RequestExample>

### Log In

<RequestExample>
  ```bash theme={null}
  curl -X POST https://api.gosentrix.io/api/v1/auth/login \
    -H "Content-Type: application/json" \
    -d '{
      "email": "user@example.com",
      "password": "SecurePassword123!"
    }'
  ```
</RequestExample>

## Using Tokens

Include the access token in the `Authorization` header:

<RequestExample>
  ```bash theme={null}
  curl -X GET https://api.gosentrix.io/api/v1/tenants \
    -H "Authorization: Bearer YOUR_ACCESS_TOKEN"
  ```
</RequestExample>

## Token Types

* **Access Token**: Short-lived (15 minutes), used for API requests
* **Refresh Token**: Long-lived (7 days), used to obtain new access tokens

## Multi-Factor Authentication (MFA)

For enhanced security, MFA can be enabled. See [MFA Enrollment](/authentication-api/mfa-enroll) for details.

## Step-Up Authentication

Sensitive operations require step-up authentication. See [Step-Up Authentication](/guides/step-up-authentication) for details.