Login
POST/api/v1/auth/login
Authenticate with local credentials and receive a JWT token.
The password check runs off the event loop. Failed attempts back off per
username and per client address (auth.login_throttle); a waiting attempt is
refused with 429 before the password is checked.
Request
Responses
- 200
- 401
- 403
- 422
- 429
Successful Response
Invalid username or password, or the account is disabled or blocked
The break-glass account is disabled in governance settings
Validation Error
Too many failed sign-ins for this username or from this address; Retry-After gives the seconds to wait