Skip to main content

Authentication API

Base URL: https://api.creovine.com/auth

All endpoints require X-API-Key header (tenant API key) unless noted otherwise.

Endpoints​

Register​

POST /auth/register
X-API-Key: <tenant-api-key>

{
  "email": "user@example.com",
  "password": "securePassword123",
  "firstName": "John",
  "lastName": "Doe"
}

Response 201 Created:

{
  "user": {
    "id": "uuid",
    "email": "user@example.com",
    "firstName": "John",
    "lastName": "Doe"
  },
  "accessToken": "<jwt>",
  "refreshToken": "<refresh-token>"
}

Login​

POST /auth/login
X-API-Key: <tenant-api-key>

{
  "email": "user@example.com",
  "password": "securePassword123"
}

Response 200 OK:

{
  "user": { "id": "uuid", "email": "user@example.com" },
  "accessToken": "<jwt>",
  "refreshToken": "<refresh-token>"
}

Google OAuth Login​

POST /auth/google
X-API-Key: <tenant-api-key>

{
  "idToken": "<google-id-token>"
}

Refresh Token​

POST /auth/refresh
X-API-Key: <tenant-api-key>

{
  "refreshToken": "<refresh-token>"
}

Response 200 OK:

{
  "accessToken": "<jwt>"
}

Authentication Headers​

All authenticated requests require:

HeaderDescription
X-API-KeyTenant API key (identifies the product/tenant)
AuthorizationBearer <jwt> (obtained from login/register)