Authentication

All requests (except health checks) require a bearer token in the Authorization header:

Authorization: Bearer YOUR_API_TOKEN

POST /auth

Authenticate with email and password credentials. Returns an API token and user object.

Request body

Response

{
	"token": "...",
	"user": {
		"id": 123,
		"email": "user@example.com",
		"first_name": "Jane",
		"last_name": "Doe"
	}
}

GET /me

Return the currently authenticated user.

DELETE /auth

Revoke the current API token.