signup

@PostMapping(value = "/signup")
open fun signup(@RequestBody signupRequest: SignupRequest, @RequestHeader(value = "DPoP", required = false) dpopProof: String, request: HttpServletRequest): ResponseEntity<AuthResponse>

Sign up a new user and start a session. What this does in plain words: - Creates a user account if the email is not already used. - If you include a DPoP header, the access token we return will be “tied” to your browser key, so it can’t be replayed on another device. - Also issues a long-lived refresh cookie so you don’t have to log in again soon. Headers: - DPoP (optional): a one-time proof for this HTTP request. If present, we bind tokens to your key.


open fun signup(signupRequest: SignupRequest): ResponseEntity<AuthResponse>

Deprecated (for removal)

Overload without DPoP or request argument for tests.