Skip to main content

POST /api/auth/login

Authenticate a user and receive an access + refresh token pair. Public — no token required.

Request body

Response


GET /api/auth/me

Returns the profile of the currently authenticated user. Requires: Bearer token.

Response


POST /api/auth/refresh

Exchange a refresh token for a new access + refresh token pair. Requires: Bearer token (the access token, even if expired, or just the refresh token — depending on server config).

Request body

Response


POST /api/auth/logout

Invalidates the current session. Requires: Bearer token.

Response


POST /api/auth/forgot-password

Sends a password reset link to the user’s registered email. Public — no token required.

Request body

Response


PUT /api/auth/reset-password/:token

Sets a new password using the token from the reset email. Public — no token required.

Path parameter

Request body

Passwords must meet complexity requirements (minimum length, mixed case, digits, special characters).

Response