JWT

Mint tokens for backends and fetch the public key set.

JSON Web Key Set

Public RS256 keys for verifying accounts-issued JWTs. Cache by kid; keys rotate rarely.

Response Body

`application/json`

curl -X GET "https://example.com/api/auth/jwks"

{  "keys": [    {}  ]}

GET token

Get a JWT token

Authorization

bearerAuth

AuthorizationBearer <token>

Session token from the set-auth-token response header (bearer plugin)

In: header

Response Body

`application/json`

`application/json`

`application/json`

`application/json`

`application/json`

`application/json`

`application/json`

curl -X GET "https://example.com/api/auth/token"

{  "token": "string"}

Sessions & credentials

Sign in, sign up, sessions, passwords, email verification.

API keys

Create, list, update and delete personal and organization keys.