Login

Authenticate a user and receive a JWT token

Endpoint

POST http://localhost:5000/api/auth/login

No authentication required. Returns a signed JWT token to use in all protected requests.

Request body

email · string · required

Registered email address.

password · string · required

Account password.

Response

200 OK

token · string · required

Signed JWT for authenticating subsequent requests.

expiresIn · integer · required

Token lifetime in seconds.

Error responses

Status	Description
400 Bad Request	Validation error (missing or malformed fields).
401 Unauthorized	Incorrect email or password.

401

{
  "message": "Correo o contraseña incorrecta."
}

Using the token

Include the returned token as a Bearer token in the Authorization header of all protected requests:

Authorization: Bearer <token>

Example

cURL

curl -X POST http://localhost:5000/api/auth/login \
  -H "Content-Type: application/json" \
  -d '{
    "email": "[e-mail]",
    "password": "SecurePass123!"
  }'