Login, register, and access token management
29 operations.
/v1/auth/registerCreates the user and a personal organization.
/v1/auth/loginReturns a JWT token on success.
/v1/auth/logout/v1/auth/me/v1/auth/refreshRevokes the current token and issues a new one.
/v1/auth/email/resendResend verification email to the authenticated user.
/v1/auth/email/verifyVerify email address with token from email link.
/v1/auth/invitations/{token}Look up a pending org invitation by its token so the registration page can show what is being joined.
/v1/auth/password/policy/v1/auth/password/check/v1/auth/password/forgotRequest password reset email.
/v1/auth/password/reset/validateCheck if a password reset token is valid without consuming it.
/v1/auth/password/resetReset password with token from email.
/v1/auth/sso-tokenStep 1 of 3 in the cross-app SSO flow.
/v1/auth/sso-exchangeStep 2 of 3.
/v1/auth/sso-completeStep 3 of 3.
/v1/auth/passkeys/register/optionsBegin a passkey enrollment ceremony.
/v1/auth/passkeys/register/verifyFinish enrollment.
/v1/auth/passkeysThe authenticated user's enrolled passkeys.
/v1/auth/passkeys/reauth/optionsFresh-assertion options for destructive passkey lifecycle actions.
/v1/auth/passkeys/{passkey_id}Remove one passkey after re-authentication (password or fresh assertion).
/v1/auth/passkeys/login/optionsUsernameless assertion options for passwordless (passkey) login.
/v1/auth/passkeys/login/verifyComplete a passwordless login.
/v1/auth/mfa/optionsExchange an mfarequired login token for passkey assertion options.
/v1/auth/mfa/verifyComplete the second factor with a passkey assertion or a recovery code.
/v1/auth/mfa/statusThe authenticated user's MFA posture for account settings.
/v1/auth/mfa/recovery-codes/regenerateReplace the recovery-code set after re-authentication; codes are shown once.
/v1/auth/captcha/configReturns site key and whether CAPTCHA is required.
/v1/auth/providersReturns which authentication methods this deployment offers.