Skip to main content
Calling this endpoint authenticates an existing player and returns a fresh pair of JWT tokens. The response shape is identical to POST /auth/register, so your token-handling code works for both flows without modification.

Endpoint

No authentication is required.

Request body

string
required
The player’s registered email address.
string
required
The player’s password.

Example request

Response

200 OK

string
A signed JWT bearer token. Include this in the Authorization: Bearer header on every authenticated request. Expires in 30 days.
string
A signed JWT refresh token. Use this to obtain a new access token when the current one expires. Expires in 180 days.
object

Error responses