POST
/auth/login
Log in and obtain a bearer token
POST /auth/login
Exchanges email and password for a bearer token. Tokens are valid for one hour (expiresIn: 3600) — request a new one when it expires instead of retrying on 401.
Request body
Required.
Content type: application/json
| Property | Type | Required | Description |
|---|---|---|---|
email |
string (email) | yes | Email address of the shop account. |
password |
string (password) | yes | The account password. Sent only over TLS. |
Responses
200 — OK
| Property | Type | Required | Description |
|---|---|---|---|
token |
string | yes | Bearer token for subsequent requests. |
expiresIn |
integer | yes | Token lifetime in seconds. |
401 — Invalid credentials
| Property | Type | Required | Description |
|---|---|---|---|
code |
string | yes | Stable, machine-readable error code — branch on this, not on the message. |
message |
string | yes | Human-readable explanation, intended for logs and debugging. |