User Token
Manage tokens issued to users.
Renew the current sign-in token
Returns a new session token to replace the one in the Authorization header, so a client can keep a session going without signing in again. Send the current token as a Bearer token.
Check that the session token is valid
Returns success when the token sent with the request is valid and its multi-factor sign-in is complete. Use it to test a token before making other calls.
Sign in with a form post and get a token
Checks a user name and password sent as form fields and returns a token. If the user must give a multi-factor code, send the returned token to the sign-in verification route to finish. This route is outside the /api/v1 path.
Complete sign-in with a multi-factor code
Finishes a sign-in that requires multi-factor authentication. Send the token from the first sign-in step as a Bearer token and the code as a JSON string; the response is the session token. This route is outside the /api/v1 path.
Sign in with a JSON body and get a token
Checks a user name and password sent as JSON and returns a token. If the user must give a multi-factor code, send the returned token to the sign-in verification route to finish. This route is outside the /api/v1 path.