Log in and obtain a session token
Exchanges an existing account's email/password for a token pair. This is how a third-party client (your own app, a custom login screen, a CLI) authenticates a user directly, without going through the Nexalware dashboard UI. Creating a new account is dashboard-only (nexalware.com/sign-up) and is not exposed here - this endpoint only signs in an account that already exists.
Request Body
application/json
TypeScript Definitions
Use the request body type in TypeScript.
Response Body
application/json
application/json
application/json
application/json
application/json
curl -X POST "https://example.com/api/v1/auth/login" \ -H "Content-Type: application/json" \ -d '{ "email": "user@example.com", "password": "string" }'{ "accessToken": "string", "refreshToken": "string", "user": { "accountId": "string", "userId": "string", "email": "string", "name": "string", "plan": "string", "role": "string", "emailVerified": true, "onboardingCompleted": true }}Get the logged-in user and account GET
Previous Page
Request a one-time code to change your password POST
Emails a 6-digit code to the logged-in user, valid briefly. Submit it to `/auth/change-password` along with the new password. Requires an existing session (log in first) and an Admin or Owner role - a Member/Viewer session gets a 403 here.