Auth

Authentication and session management

Login

post

Authenticate with email and password. For dashboard access only.

Body

application/json

emailstring · emailRequired

passwordstring · min: 8Required

Responses

200

Login successful

application/json

401

Invalid credentials

application/json

post

/auth/login

HTTPcURLJavaScriptPython

POST /api/auth/login HTTP/1.1
Content-Type: application/json
Accept: */*
Content-Length: 60

{
  "email": "[email protected]",
  "password": "SecurePass123!"
}

{
  "access_token": "text",
  "refresh_token": "text"
}

Refresh tokens

post

Exchange refresh token for new access and refresh tokens.

Body

application/json

refresh_tokenstringRequired

Responses

200

Tokens refreshed

application/json

401

Invalid or expired refresh token

application/json

post

/auth/refresh

HTTPcURLJavaScriptPython

POST /api/auth/refresh HTTP/1.1
Content-Type: application/json
Accept: */*
Content-Length: 54

{
  "refresh_token": "dGhpcyBpcyBhIHJlZnJlc2ggdG9rZW4..."
}

{
  "access_token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...",
  "refresh_token": "bmV3IHJlZnJlc2ggdG9rZW4..."
}

Logout

post

Invalidate the provided refresh token.

Body

application/json

refresh_tokenstringRequired

Responses

200

Logged out successfully

application/json

post

/auth/logout

HTTPcURLJavaScriptPython

POST /api/auth/logout HTTP/1.1
Content-Type: application/json
Accept: */*
Content-Length: 54

{
  "refresh_token": "dGhpcyBpcyBhIHJlZnJlc2ggdG9rZW4..."
}

200

Logged out successfully

{
  "message": "Logged out successfully"
}

Logout all sessions

post

Invalidate all sessions for the current user.

Authorizations

BearerAuth

AuthorizationstringRequired

API key provided by GoMobile team. Request yours at https://docs.google.com/forms/d/1F6_7OIDNq8_lWgKPyP-DudF3dvBTl31X4dqVf5St2zE

Responses

200

All sessions logged out

application/json

401

Unauthorized

post

/auth/logout-all

HTTPcURLJavaScriptPython

POST /api/auth/logout-all HTTP/1.1
Authorization: Bearer YOUR_SECRET_TOKEN
Accept: */*

{
  "message": "All sessions logged out successfully"
}

Get active sessions

post

Retrieve all active sessions for the current user.

Authorizations

BearerAuth

AuthorizationstringRequired

API key provided by GoMobile team. Request yours at https://docs.google.com/forms/d/1F6_7OIDNq8_lWgKPyP-DudF3dvBTl31X4dqVf5St2zE

Responses

200

List of active sessions

application/json

401

Unauthorized

post

/auth/sessions

HTTPcURLJavaScriptPython

POST /api/auth/sessions HTTP/1.1
Authorization: Bearer YOUR_SECRET_TOKEN
Accept: */*

{
  "sessions": [
    {
      "id": "550e8400-e29b-41d4-a716-446655440000",
      "userAgent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7)",
      "lastAccessedAt": "2025-01-15T10:30:00.000Z",
      "createdAt": "2025-01-10T08:00:00.000Z"
    }
  ]
}

Revoke session

post

Revoke a specific session by ID.

Authorizations

BearerAuth

AuthorizationstringRequired

API key provided by GoMobile team. Request yours at https://docs.google.com/forms/d/1F6_7OIDNq8_lWgKPyP-DudF3dvBTl31X4dqVf5St2zE

Body

application/json

sessionIdstring · uuidRequired

Responses

200

Session revoked

application/json

401

Unauthorized

post

/auth/revoke-session

HTTPcURLJavaScriptPython

POST /api/auth/revoke-session HTTP/1.1
Authorization: Bearer YOUR_SECRET_TOKEN
Content-Type: application/json
Accept: */*
Content-Length: 52

{
  "sessionId": "550e8400-e29b-41d4-a716-446655440000"
}

{
  "message": "Session revoked successfully"
}