Skip to main content
POST
/
api
/
auth
/
users
Register new user
curl --request POST \
  --url https://api.example.com/api/auth/users \
  --header 'Content-Type: application/json' \
  --data '
{
  "email": "user@example.com",
  "password": "securepassword123",
  "name": "John Doe",
  "redirectTo": "<string>"
}
'
{
  "user": {
    "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "email": "jsmith@example.com",
    "profile": {
      "name": "<string>",
      "avatar_url": "<string>"
    },
    "metadata": {},
    "emailVerified": true,
    "providers": [
      "<string>"
    ],
    "createdAt": "2023-11-07T05:31:56Z",
    "updatedAt": "2023-11-07T05:31:56Z"
  },
  "accessToken": "<string>",
  "csrfToken": "<string>",
  "refreshToken": "<string>",
  "requireEmailVerification": true
}

Documentation Index

Fetch the complete documentation index at: https://docs.insforge.dev/llms.txt

Use this file to discover all available pages before exploring further.

Query Parameters

​
client_type
enum<string>
default:web

Client type determines how refresh tokens are returned:

  • web: Refresh token stored in httpOnly cookie, csrfToken returned in response
  • mobile/desktop/server: refreshToken returned directly in response body
Available options:
web,
mobile,
desktop,
server

Body

application/json
​
email
string<email>
required
Example:

"user@example.com"

​
password
string
required

Password meeting configured requirements (check /api/auth/email/config for current requirements)

Example:

"securepassword123"

​
name
string
Example:

"John Doe"

​
redirectTo
string<uri>

Used for link-based email verification. The email link always opens an InsForge backend endpoint first; after the token is verified, InsForge redirects the browser to this URL. This URL must be included in allowedRedirectUrls. Recommended: use your app's sign-in page.

Response

User created successfully

​
user
object
​
accessToken
string | null

JWT authentication token (null if email verification required)

​
csrfToken
string | null

CSRF token for use with refresh endpoint (web clients only, null if email verification required)

​
refreshToken
string | null

Refresh token for mobile/desktop/server clients (null for web clients or if email verification required)

​
requireEmailVerification
boolean

Whether email verification is required before login