Authentification

POST /api/auth/sign-up
Content-Type: application/json

{
  "email": "user@example.com",
  "password": "SecurePassword123"
}

{
  "user": {
    "id": "user_123",
    "email": "user@example.com",
    "name": null,
    "image": null,
    "emailVerified": false,
    "createdAt": "2024-01-15T10:30:00Z"
  },
  "session": {
    "id": "session_123",
    "token": "eyJhbGc...",
    "expiresAt": "2024-01-22T10:30:00Z"
  }
}

curl -X POST http://localhost:3000/api/auth/sign-up \
  -H "Content-Type: application/json" \
  -d '{
    "email": "user@example.com",
    "password": "SecurePassword123"
  }'

POST /api/auth/sign-in
Content-Type: application/json

{
  "email": "user@example.com",
  "password": "SecurePassword123"
}

{
  "user": { ... },
  "session": { ... }
}

curl -X POST http://localhost:3000/api/auth/sign-in \
  -H "Content-Type: application/json" \
  -d '{
    "email": "user@example.com",
    "password": "SecurePassword123"
  }'

POST /api/auth/sign-out
Authorization: Bearer TOKEN

{
  "success": true
}

curl -X POST http://localhost:3000/api/auth/sign-out \
  -H "Authorization: Bearer YOUR_TOKEN"

GET /api/auth/session
Authorization: Bearer TOKEN

{
  "user": { ... },
  "session": { ... }
}

curl http://localhost:3000/api/auth/session \
  -H "Authorization: Bearer YOUR_TOKEN"

POST /api/auth/send-magic-link
Content-Type: application/json

{
  "email": "user@example.com",
  "redirectUrl": "http://localhost:3000/dashboard"
}

{
  "success": true,
  "message": "Magic link sent to email"
}

curl -X POST http://localhost:3000/api/auth/send-magic-link \
  -H "Content-Type: application/json" \
  -d '{
    "email": "user@example.com",
    "redirectUrl": "http://localhost:3000/dashboard"
  }'

POST /api/auth/verify-email
Content-Type: application/json

{
  "token": "verification_token_from_email"
}

{
  "success": true,
  "user": { ... }
}

POST /api/auth/two-factor/enable
Authorization: Bearer TOKEN

{
  "secret": "JBSWY3DPEBLW64TMMQ======",
  "qrCode": "data:image/png;base64,..."
}

POST /api/auth/two-factor/verify
Authorization: Bearer TOKEN
Content-Type: application/json

{
  "code": "123456"
}

{
  "success": true,
  "user": { ... }
}

POST /api/auth/sign-in
Content-Type: application/json

{
  "email": "user@example.com",
  "password": "SecurePassword123",
  "totpCode": "123456"
}

GET /api/auth/oauth/github

GET /api/auth/oauth/google

POST /api/auth/passkey/register
Authorization: Bearer TOKEN

POST /api/auth/passkey/sign-in
Content-Type: application/json

{
  "error": "INVALID_CREDENTIALS",
  "message": "Email or password is incorrect"
}

{
  "error": "USER_ALREADY_EXISTS",
  "message": "User with this email already exists"
}

{
  "error": "EMAIL_NOT_VERIFIED",
  "message": "Please verify your email first"
}

{
  "error": "INVALID_TOKEN",
  "message": "Token is invalid or expired"
}

{
  "error": "INVALID_TOTP",
  "message": "The TOTP code is invalid or expired"
}