Auth

The Auth API covers the full identity lifecycle outside normal resource CRUD: self-service signup, email verification, credential-based login (token/boot), password recovery, self-service account deletion (unregister), and superadmin delegate access. Every endpoint in this group lives under /auth (no /v1.0 prefix) and most are unauthenticated by design, since they exist to establish authentication in the first place.

API Reference: Auth endpoints

Note

AI Implementation Hint

For step-by-step walkthroughs with example curl commands, see the Signup quickstart and Authentication quickstart. This page is the field-by-field reference: exact request/response schemas, validation rules, and error causes for every /auth/* endpoint.

• Overview
  • Endpoint Summary
  • Auth & Account Lifecycle
  • Signup — POST /auth/signup
  • Email Verify — POST / GET /auth/email-verify
  • Login (Token) — POST /auth/login
  • Boot (Direct Token) — POST /auth/boot
  • Password Forgot — POST /auth/password-forgot
  • Password Reset — GET / POST /auth/password-reset
  • Unregister (Self-Service Deletion) — POST / DELETE /auth/unregister
  • Delegate (Superadmin Support Access) — POST /auth/delegate
  • Related Documentation