Skip to main content
POST
Sign in

Body

application/json
email
string
required
Required string length: 3 - 320
password
string
required
Required string length: 1 - 1024
recovery_code
string | null

One of the person's recovery codes, in place of totp when the authenticator app is lost. Case, spaces and dashes do not matter. Each code works once.

Required string length: 10 - 32
space_id
string<uuid> | null

The space the token opens. Defaults to the first space the person can reach.

totp
string | null

The current code of the authenticator app. Required when the person enrolled a second factor.

Pattern: ^\d{6}$

Response

The token, its lifetime in seconds and the space it opens, with the recovery codes when this login confirmed the authenticator.

access_token
string
required
expires_in
integer
required

Seconds until the token expires.

space_id
string<uuid>
required
recovery_codes
string[] | null

Shown once: the ten recovery codes, when this login confirmed the authenticator. Null otherwise.

recovery_codes_left
integer | null

How many recovery codes remain, when this login used one. Null otherwise.

token_type
string
default:Bearer