Log In

Authenticate with email and password and receive a JWT token.

POST /api/auth/login

No authentication required.

Request body

email · string · required

The email address associated with the account.

password · string · required

The account password.

Example

cURL

curl --request POST \
  --url http://localhost:3000/api/auth/login \
  --header 'Content-Type: application/json' \
  --data '{
    "email": "[e-mail]",
    "password": "s3cr3tpass"
  }'

Response

200 OK

token · string · required

A signed JWT valid for 30 days. Include this token in the Authorization header for authenticated requests.

user · object · required

Hide properties

id · string

Unique identifier for the user.

name · string

The user’s display name.

email · string

The user’s email address.

points · number

Total habit points accumulated.

current_streak · number

Current consecutive days with at least one completed habit.

max_streak · number

All-time highest streak.

Example response

{
  "token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...",
  "user": {
    "id": "a3f2c1d0-89b4-4e7a-b6f5-1234567890ab",
    "name": "Maria Silva",
    "email": "[e-mail]",
    "points": 120,
    "current_streak": 5,
    "max_streak": 14
  }
}

Errors

Status	Description
401	Email or password is incorrect, or no account found for that email. Message: "Email ou senha inválidos".
500	Internal server error.