Body Parameters
User’s registered email address
User’s password
Response
Indicates whether the authentication was successful
JWT access token for authenticating API requests (expires in 30 minutes)
JWT refresh token for obtaining new access tokens (valid for 30 days)
Error Responses
Missing Fields - 400 Bad Request
Missing Fields - 400 Bad Request
User Not Found - 403 Forbidden
User Not Found - 403 Forbidden
Missing Credentials - 403 Forbidden
Missing Credentials - 403 Forbidden
Incorrect Password - 401 Unauthorized
Incorrect Password - 401 Unauthorized
Server Error - 500 Internal Server Error
Server Error - 500 Internal Server Error
Notes
- On success, an HttpOnly cookie named
replyke-refresh-jwt
is set. - The
accessToken
is returned in the response body and expires in 30 minutes. - Refresh token is valid for 30 days.
- Active suspensions are included in the response user object.
- Only valid users with matching credentials can sign in.