Password login

POST

http://os-992244000006.local/api/v1/auth/login

Authenticate with a role password and issue a session.

Failed attempts are rate-limited per source IP. Sustained failures across all sources may trigger a temporary global cooldown.

Cookie mode (token_usage=cookie): returns HTTP 204 and sets an HTTP-only ouster_session cookie (Path=/, SameSite=Strict; Secure when the request arrived over HTTPS).

Bearer mode (token_usage=bearer): returns HTTP 200 with a session JWT in the body.

Authenticate with a role password and issue a session. Failed attempts are rate-limited per source IP. Sustained failures across all sources may trigger a temporary global cooldown. **Cookie mode** (`token_usage=cookie`): returns HTTP 204 and sets an HTTP-only `ouster_session` cookie (`Path=/`, `SameSite=Strict`; `Secure` when the request arrived over HTTPS). **Bearer mode** (`token_usage=bearer`): returns HTTP 200 with a session JWT in the body.

Request

This endpoint expects an object.

roleenumRequired

passwordstringRequiredformat: "password"

token_usageenumRequired

cookie — session delivered via HTTP-only ouster_session cookie (browser clients). bearer — session JWT returned in the response body (API clients).

Response

tokenstring

HS256 session JWT for Authorization Bearer use

roleenum

exp_pohdouble

Session expiration

Errors

400

Bad Request Error

401

Unauthorized Error

429

Too Many Requests Error

$	curl -X POST http://os-992244000006.local/api/v1/auth/login \
>	-H "Content-Type: application/json" \
>	-d '{
>	"role": "admin",
>	"password": "S3cureP@ssw0rd!",
>	"token_usage": "cookie"
>	}'