Login end user
POST/auth/users/login
Login end user with email and password. Accepts optional custom_claims to embed in JWT (max 4KB). If MFA is enabled for the user, returns mfa_required: true with a challenge token. The user must then call POST /v1/auth/mfa/verify with the challenge token and TOTP code.
Request
Responses
- 200
- 400
- 401
- 403
- 500
Login successful or MFA required
Validation error
Invalid email or password
Account locked or session limit exceeded
Internal server error