Skip to main content
POST
User login (Admin or Processor)
The login endpoint authenticates admin users and processors, returning JWT tokens for session-based access.

Endpoint


Request Body

string
required
User email address
string
required
User password

User Types

Admin Users

Dashboard users with roles like system_admin, compliance_user, super_agent

Processors

Merchant accounts for POS terminal management

Example


Token Management

1

Login

Receive access token (15 min) and refresh token (7 days)
2

Use Token

Include in Authorization: Bearer <token> header
3

Refresh

When expired, use refresh endpoint to get new tokens
4

Logout

Revoke refresh token when logging out

User Roles


Errors


Security Notes

  • Login attempts are logged for audit
  • Failed attempts may trigger account lockout
  • Access tokens expire after 15 minutes
  • Always use HTTPS in production

Refresh Token

Get new access token

Logout

Revoke refresh token

Current User

Get current user info

Authorizations

Authorization
string
header
required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Body

application/json

Login credentials

email
string
required
password
string
required

Response

OK

expires_at
integer
refresh_expires_at
integer
refresh_token
string
success
boolean
token
string
user
object