Establish an account session by using the email password
POST/api/auth/login
Ordinary account and administrator account unified use this 1 portal login.
If the mailbox and password in the request match WORKFLOW_BOOTSTRAP_ADMIN_EMAIL / WORKFLOW_BOOTSTRAP_ADMIN_PASSWORD,
The server creates this builtin_admin only while the account table is empty. Later logins verify the current database password and never overwrite a changed password or disabled state from environment variables.
Accounts, password hashes, sessions, and invitations are stored in the PostgreSQL database selected by WORKFLOW_DATABASE_URL.
Passwords use scrypt with random salts. The browser cookie stores only a signed refresh token and the database stores token hashes only.
Request
Responses
- 200
- 400
- 401
- 503
Login successful and write httpOnly cookie.
workflow-code standard error response.
workflow-code standard error response.
workflow-code standard error response.