Appearance
auth
11 endpoints at a glance
| Method | Path | Summary |
|---|---|---|
POST | /auth/login | Login |
POST | /auth/logout | Logout |
GET | /auth/me | Me |
PATCH | /auth/me | Update Me |
POST | /auth/me/password | Change Password |
POST | /auth/register | Register |
GET | /auth/users/ | List Users |
POST | /auth/users/ | Create User |
DELETE | /auth/users/{username} | Delete User |
PATCH | /auth/users/{username} | Update User |
POST | /auth/users/{username}/password | Admin Reset Password |
auth
Login
POST
/auth/login
Verify credentials, set the session cookie, return the user.
Generic 401 on any failure — never leak whether the username exists.
Request Body
application/json
JSON "username": "string", "password": "string"
{
}
Responses
Successful Response
application/json
JSON "additionalProperties": "string"
{
}
Register
POST
/auth/register
Self-serve signup. Creates a viewer and auto-logs in.
Admins are still admin-created via POST /auth/users/ —
self-registration intentionally has no role field on the wire.
Request Body
application/json
JSON "username": "string", "password": "string"
{
}
Responses
Successful Response
application/json
JSON "additionalProperties": "string"
{
}