Skip to main content

​
Authentication

The API uses JWT (JSON Web Token) Bearer authentication. All protected endpoints require a valid token in the Authorization header.

​
Flow

1

Register a new account

Call POST /api/v1/auth/register with your name, email, and password.
2

Login to get a token

Call POST /api/v1/auth/login with your credentials. You’ll receive an access_token.
3

Use the token in requests

Add the token to every protected request:
Authorization: Bearer <your_access_token>

​
Example

# 1. Register
curl -X POST http://localhost:3000/api/v1/auth/register \
  -H "Content-Type: application/json" \
  -d '{"name":"John","email":"john@example.com","password":"secret123"}'

# 2. Login
curl -X POST http://localhost:3000/api/v1/auth/login \
  -H "Content-Type: application/json" \
  -d '{"email":"john@example.com","password":"secret123"}'
# → { "access_token": "eyJ..." }

# 3. Authenticated request
curl http://localhost:3000/api/v1/projects \
  -H "Authorization: Bearer eyJ..."

​
Token Lifetime

Tokens are configured via the JWT_EXPIRATION environment variable (default: 7d).