Skip to main content
POST
POST
Authenticates a user with their email and password. On success, returns a signed RS256 JWT access token that must be included in the Authorization header for all protected endpoints.
This endpoint is rate-limited to 10 requests per minute per IP address.

Request Body

string
required
The user’s registered email address.
string
required
The user’s account password.

Response

boolean
true when the login succeeds.
string
Signed JWT (RS256). Pass this as Authorization: Bearer <token> on subsequent requests.
object
The authenticated user’s profile — id, email, name, status, and is_from_suit flag.

Body

application/json
email
string<email>
required
Example:

"dev@webyes.com"

password
string
required
Example:

"securepassword123"

Response

Login successful

success
boolean
Example:

true

data
object