/account

This API is created to enable local users to get and maintain their access and refresh tokens.

/account/login

POST /account/login?useCookies=false

Request body

{
    "email": "string",
    "password": "string"
}

Response HTTP 200 (useCookies=false). Token-based authentication.

{
    "tokenType": "string",
    "accessToken": "string",
    "expiresIn": 0,
    "refreshToken": "string"
}

Response HTTP 200 body for (useCookies=true - cookie-based authentication) is empty, but the response contains authentication cookie.

This endpoint is used only in token-based authentication scenario to get another access token when the previous one is about to expire.

POST /account/refresh

Request body

{
    "refreshToken": "string"
}

Response HTTP 200

{
    "tokenType": "string",
    "accessToken": "string",
    "expiresIn": 0,
    "refreshToken": "string"
}

POST /account/logout

Request

{}

Response is HTTP 200 in case of a successful logout.
Response is HTTP 401 in case of unauthenticated user calling the endpoint.