Authentication API
End-user Authentication for headless apps.
This page is a short index. The full endpoint docs live in the Authentication section.
Full documentation
Endpoint summary
| Method | Path | Description |
|---|---|---|
| POST | /auth/signup | Register |
| POST | /auth/login | Password sign-in |
| POST | /auth/refresh | Rotate session |
| POST | /auth/logout | Revoke current session |
| POST | /auth/logout-all | Revoke all sessions |
| GET | /auth/me | Current user |
| POST | /auth/change-password | Change password |
| POST | /auth/verify-email/resend | Resend verification |
| POST | /auth/verify-email/confirm | Confirm verification |
| GET | /auth/api-keys | List user API keys |
| POST | /auth/api-keys | Create uak_… key |
| POST | /auth/api-keys/{keyId}/revoke | Revoke key |
| POST | /auth/api-keys/introspect | Validate a uak_… key |
Authentication tokens identify the user. For CMS content routes, use a project API token.