None

POST /v1/login

Sign in with email and password. Returns a session that lasts 14 days and the same account object as GET /v1/me.

No auth. Body {"email","password"}. 200 with the same account object as GET /v1/me plus session. Sessions last 14 days.

curl -sS -X POST "$BASE/v1/login" \
  -H 'Content-Type: application/json' \
  -d '{"email":"[email protected]","password":"at-least-8"}'

401 if the password is wrong or the account has no password yet. The message is always “Email or password is wrong.” An account that still has only an API key can call POST /v1/password with that key to set the owner password.

Limit: 20 logins per IP per hour.

POST /v1/trialPOST /v1/logout