User Login
POST/v1/users/login
Using email let us create access token which can be utilised for subsequent api request, without this, request will be denied with reason as unauthorised.
Access token expiry
Access tokens expire after 15 minutes.
JWT Claims
The accessToken returned is a signed JWT. Its payload contains the following claims:
| Claim | Type | Description |
|---|---|---|
sub | String | Unique user identifier (ULID) |
aud | String | Your application's Client ID — unique per API key |
iss | String | Token issuer (https://iam.onmeta.io/onmeta) |
iat | Integer | Issued-at time (Unix timestamp) |
exp | Integer | Expiration time (Unix timestamp) — 15 minutes after iat |
jti | String | Unique JWT identifier (UUID/ULID) — used for request tracing and replay prevention |
tenant_id | String | Internal Onmeta tenant identifier |
Request
Responses
- 200
- 400
- 401
Returns access and refresh tokens for the authenticated user.
Invalid or missing email address.
Invalid API key — the x-api-key header is missing or incorrect.