Authentication

Register users, log in, and retrieve the current session. All protected endpoints require a Bearer token in the Authorization header.

POST/auth/register

Create a new user account and receive an access token.

Field	Type	Required	Note
email	string	Yes	Valid email address
password	string	Yes	Min 8 characters
name	string	Yes	Display name

{
  "access_token": "eyJhbGciOiJIUzI1NiIs...",
  "user": {
    "id": "usr_a1b2c3",
    "email": "you@company.com",
    "name": "Your Name"
  }
}

POST/auth/login

Authenticate with email and password. Returns an access token.

Field	Type	Required	Note
email	string	Yes	—
password	string	Yes	—

{
  "access_token": "eyJhbGciOiJIUzI1NiIs...",
  "user": {
    "id": "usr_a1b2c3",
    "email": "you@company.com",
    "name": "Your Name"
  }
}

GET/auth/meAuth required

Get the currently authenticated user's profile.

{
  "id": "usr_a1b2c3",
  "email": "you@company.com",
  "name": "Your Name"
}

Using tokens

Include the token in every authenticated request:

curl -H "Authorization: Bearer YOUR_TOKEN" \
  https://api.hivemeld.com/auth/me

Tokens do not expire by default. If a request returns 401, log in again to get a fresh token.