Get api auth token

POST

/api/auth

Authenticate with username + password to obtain a JWT bearer token. Send the returned token as Authorization: Bearer <token> header on every subsequent API request. The token is signed and stateless — invalidating it server-side is not possible; wait for expiry or rotate the JWT key pair. expires is the JWT exp claim — Unix timestamp (seconds since epoch) at which the token becomes invalid.

Request

Body Params application/json

Example

{
    "username": "api-user@example.com",
    "password": "************"
}

Responses

🟢200OK

application/json

Bodyapplication/json

Example

{
    "token": "eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpYXQiOjE3MTY4MDAwMDAsImV4cCI6MTcxNjgwMzYwMCwidXNlcm5hbWUiOiJhcGktdXNlckBleGFtcGxlLmNvbSJ9.<signature>",
    "expires": 1716803600
}

🟠400Invalid JSON.

🟠401Invalid credentials

Modified at 2026-05-29 10:44:16

Samples

Attributes & Options