Login User

POST 
/sessions

Authenticate a user with email (username optional) and password and return a bearer token. When the user has 2FA enabled, a 2FA-required response is returned instead and the login must be completed via the 2FA verification endpoint. Responds 401 for wrong credentials; rate-limited to 10 requests per minute.

Request

Responses

200

Successful Response

401

The user was not found or the password was incorrect.

422

The user was not have correct request.