Authentication

User authentication and session management

📄️ User Login

Authenticate user with email and password to receive JWT access token.

Accept user invitation and set password.

Request a password reset email. Always returns success for security (doesn't reveal if email exists).

Verify user email address using the verification token.

Resend the email verification link.

Change user password (requires authentication).

Get current user profile information via auth service.

List the current user's active sessions across devices.

Revoke one of the current user's active sessions by id.

Revoke every active session for the current user except the one matching the X-Refresh-Token header.