Authentication API

Authentication is handled by NextAuth with credentials-based login. The central database stores user accounts and tenant memberships.

Endpoints

NextAuth catch-all handler for sign-in, sign-out, and session management.

Create a new user account.

Request Body:


{
  "name": "John Doe",
  "email": "john@example.com",
  "password": "SecurePass123!"
}

Request a password reset email.

Request Body:


{
  "email": "john@example.com"
}

Confirm a password reset with a token.

Request Body:


{
  "token": "reset-token-here",
  "password": "NewSecurePass123!"
}

Refresh the current user session and re-fetch tenant data.

Switch the active tenant for multi-tenant users.

Request Body:


{
  "tenantId": "tenant-uuid-here"
}

Passwords are hashed using scrypt with the following parameters: