Login
Authenticate with email and password.
POST
/auth/loginAuthenticate a user and issue a fresh signed session cookie.
Request body:
{
"email": "person@example.com",
"password": "super-secret-password"
}On success:
- a new session is created
- the Axum integration sets a signed session cookie
- the user payload is returned
Common error responses:
401 Unauthorizedfor invalid credentials403 Forbiddenwhen login requires verified email and the user is still unverified
Session behavior
Successful login creates a new session record and the Axum integration stores the raw session token in a signed cookie.