Get Your Access Token
Login and Authentication
Exchange your email and password for a JWT token. It’s like a backstage pass but for APIs.
Security features:
- Rate limiting prevents brute force (10 attempts then timeout)
- Case-insensitive emails (we’re reasonable people)
- Tokens expire after 1 week (nothing good lasts forever)
Token usage:
- Include in Authorization header:
Bearer <token> - Refresh before expiry or start the login dance again
Body
Response
Authentication successful. You're in!
Authentication token response
JWT bearer token for API authentication
"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjb21wYW55X2lkIjoiNjg1ZjViZGU5MjhkN2FhZDMyOWZhYmQ2IiwiZW1haWwiOiJhY0B0ZXN0LmNvbSIsImV4cCI6MTc1MTc2NDYwOSwiaWF0IjoxNzUxNTA1NDA5fQ.m5xD1XYrQL9uFSJz9A3DRwXIXsEcTojTyAbiNHajHck"
JWT bearer token for Websocket authentication
"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjb21wYW55X2lkIjoiNjg1ZjViZGU5MjhkN2FhZDMyOWZhYmQ2IiwiZW1haWwiOiJhY0B0ZXN0LmNvbSIsImV4cCI6MTc1MTc2NDYwOSwiaWF0IjoxNzUxNTA1NDA5fQ.m5xD1XYrQL9uFSJz9A3DRwXIXsEcTojTyAbiNHajHck"
Token type (always 'bearer' because that's how JWT rolls)
"bearer"
Token validity period in seconds (countdown to re-authentication)
604800

