Authentication API

Register

Create a new user account.

POST /api/v1/auth/register
Content-Type: application/json

Request Body:

{
  "email": "user@example.com",
  "password": "password123",
  "firstName": "John",
  "lastName": "Doe"
}

Response: 201 Created

{
  "success": true,
  "data": {
    "user": {
      "id": "clx2...",
      "email": "user@example.com",
      "firstName": "John",
      "lastName": "Doe",
      "role": "USER"
    },
    "tokens": {
      "accessToken": "eyJ...",
      "refreshToken": "eyJ..."
    }
  }
}

Login

POST /api/v1/auth/login
Content-Type: application/json

Request Body:

{
  "email": "user@example.com",
  "password": "password123"
}

Refresh Token

Exchange refresh token for new token pair.

POST /api/v1/auth/refresh
Content-Type: application/json

Request Body:

{
  "refreshToken": "eyJ..."
}

Logout

Invalidate current session.

POST /api/v1/auth/logout
Content-Type: application/json

Request Body:

{
  "refreshToken": "eyJ..."
}

Logout All

Invalidate all sessions (requires auth).

POST /api/v1/auth/logout-all
Authorization: Bearer <access_token>

Verify Token

Check if token is valid.

GET /api/v1/auth/verify
Authorization: Bearer <access_token>

Change Password

POST /api/v1/auth/change-password
Authorization: Bearer <access_token>
Content-Type: application/json

Request Body:

{
  "currentPassword": "oldpassword",
  "newPassword": "newpassword"
}