Skip to main content

Log in with email/password (local provider)

POST 
/api/v1/auth/login

Validates credentials against the local provider matching the email's domain. On success either issues access/refresh cookies directly, or (if MFA is enabled/required) issues a restricted safebucket_mfa_token cookie and returns mfa_required: true.

Request​

Responses​

Authenticated (or MFA step-up required)

Response Headers
    Set-Cookie

    Either full auth cookies (safebucket_access_token + safebucket_refresh_token) if no MFA step-up is needed, or a single restricted safebucket_mfa_token cookie if mfa_required: true is returned in the body.