login

@PostMapping(value = "/login")
open fun login(@RequestBody loginRequest: LoginRequest, @RequestHeader(value = "DPoP", required = false) dpopProof: String, request: HttpServletRequest): ResponseEntity<AuthResponse>

Log in and start a session. In simple terms: - We check your email and password. - You must include a DPoP header so we can bind your tokens to your browser key. - On success, we return a short-lived access token and set a refresh cookie. Headers: - DPoP (required): proof for this POST /auth/login call.


open fun login(loginRequest: LoginRequest): ResponseEntity<AuthResponse>

Deprecated (for removal)

Overload without DPoP or request argument for tests.