login
@PostMapping(value = "/login" )
Log in and start a session. In simple terms: - We check your email and password. - You must include a DPoP header so we can bind your tokens to your browser key. - On success, we return a short-lived access token and set a refresh cookie. Headers: - DPoP (required): proof for this POST /auth/login call.
Deprecated (for removal)
Overload without DPoP or request argument for tests.