/v1/auth/login

POST

/v1/auth/login

curl --request POST \
  --url http://localhost:8787/v1/auth/login \
  --header 'Content-Type: application/json' \
  --data '{ "email": "hello@example.com", "password": "example", "tenantId": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0" }'

• Local development (`wrangler dev --env dev`).
• Staging — placeholder host; real custom domain not yet provisioned.
• Production — placeholder host; real custom domain not yet provisioned.

Request Body

Media typeapplication/json

object

email

required

string format: email

password

required

string

>= 1 characters

tenantId

required

string format: uuid

Example^generated

{
  "email": "hello@example.com",
  "password": "example",
  "tenantId": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0"
}

Responses

200

Session established; access + refresh cookies set.

Media typeapplication/json

object

accessTokenExpiresAt

required

string

user

required

object

email

required

string format: email

id

required

string format: uuid

role

required

string

Example^generated

{
  "accessTokenExpiresAt": "example",
  "user": {
    "email": "hello@example.com",
    "id": "2489E9AD-2EE2-8E00-8EC9-32D5F69181C0",
    "role": "example"
  }
}

401

Invalid credentials (also returned for an unknown email or a locked account — no enumeration).

Media typeapplication/problem+json

object

code

required

string

Allowed values: invalid_credentials

detail

required

string

status

required

number

title

required

string

type

required

string

Example

{
  "code": "invalid_credentials"
}