Skip to main content
POST
User login

Query Parameters

client_type
enum<string>
default:web

Client type determines how refresh tokens are returned:

  • web: Refresh token stored in httpOnly cookie, csrfToken returned in response
  • mobile/desktop/server: refreshToken returned directly in response body
Available options:
web,
mobile,
desktop,
server

Body

application/json
email
string<email>
required
password
string
required

Response

Login successful

user
object
accessToken
string
csrfToken
string | null

CSRF token for use with refresh endpoint (web clients only)

refreshToken
string | null

Refresh token for mobile/desktop/server clients (null for web clients)