Skip to main content

Authentication API

Endpoints for user authentication and token management.

Get OAuth Access Token​

Authenticates a user and returns an access token for subsequent API calls. This endpoint does not require an existing token.

POST /oauth/token

Request Body:

{
  "grant_type": "password",
  "client_id": "your-client-id",
  "client_secret": "your-client-secret",
  "username": "[email protected]",
  "password": "user-password"
}

Required Fields:

  • grant_type: Must be password
  • client_id: OAuth client identifier
  • client_secret: OAuth client secret
  • username: User's login email
  • password: User's password

Response: 200 OK

{
  "access_token": "eyJhbGciOiJIUzI1NiIs...",
  "token_type": "Bearer",
  "expires_in": 3600
}

Error Response: 401 Unauthorized if credentials are invalid.

Update User Password​

Updates the password for the currently authenticated user.

POST /user/password

Request Body:

{
  "current_password": "old-password",
  "new_password": "new-secure-password"
}

Response: 200 OK