Overview

View as Markdown

Login, logout, token refresh, OTP, and device-change recovery. Base path /auth, fully public (auth/** whitelisted) except Logout and Refresh Token, which still need a valid Bearer token.