Skip to main content
POST
Log in

Request body

A JSON object with both fields as text. If either is missing, empty or not text, it returns 400.
string
required
User’s email address.
string
required
User’s password.
The JWT is not returned in the response body. It is set automatically as the HttpOnly cookie access_token_cookie. Later calls to protected endpoints must include this cookie. Logging in also creates the csrf_access_token cookie: its value goes in the X-CSRF-TOKEN header of session requests other than GET.

Response

boolean
true if authentication succeeded.
string
ROR identifier of the institution associated with the user.
string
Name of the institution.
string
User’s role on the platform (admin, staff, etc.).