Auth
Authentication and account verification flows.
Auth feature availability flags
Auth feature availability flags
Login with email and password
Authenticates a user and returns either a session payload or a 2FA challenge.
Verify 2FA token and finalize login
Completes login for a user that has two-factor authentication enabled.
Verify account email token
Validates an email verification token and redirects to the frontend.
Resend verification email
Sends a new account verification email for the authenticated or provided user.
Request password reset email
Starts the password reset flow by sending a reset link to the user email.
Reset password using token
Applies a new password using a previously issued password reset token.
Logout current session
Invalidates the current session cookie.
Compatibility logout endpoint
Legacy alias retained for client compatibility. Prefer `/api/logout` for new integrations.
Register user from invitation
Creates a user account using a valid invitation token.
Verify email endpoint without token
Compatibility route returning an explicit error when token is missing.