Authentication API Overview

Authentication protects API access with user credentials, token refresh, and second-factor verification where enabled.

Public Integration Notes

• Treat access tokens as short-lived credentials.
• Use refresh flows instead of storing long-lived session material.
• Handle second-factor challenges as part of login and sensitive operations.
• Keep credential and token handling outside customer-visible logs.

Related API

• auth
• refresh-token
• verify-2fa

License module IDs must match OpenAPI module IDs exactly. If a mismatch appears, update OpenAPI metadata rather than adding aliases.