api

Handle Google OAuth2 login with authorization code. This endpoint is for users who already have accounts.

Expected payload: { "code": "authorization_code_from_google", "redirect_uri": "your_frontend_redirect_uri" }

Returns: { "access_token": "jwt_access_token", "refresh_token": "jwt_refresh_token", "user": { "id": user_id, "email": "[email protected]", "first_name": "John", "last_name": "Doe" } }

Handle Okta OAuth2 login with authorization code. This endpoint is for users who already have accounts.

Expected payload: { "code": "authorization_code_from_okta", "redirect_uri": "your_frontend_redirect_uri" }

Returns: { "access_token": "jwt_access_token", "refresh_token": "jwt_refresh_token", "user": { "id": user_id, "email": "[email protected]", "first_name": "John", "last_name": "Doe" } }

Takes a set of user credentials and returns an access and refresh JSON web token pair to prove the authentication of those credentials.

Logout endpoint that blacklists the refresh token.

Expected request body: { "refresh": "refresh_token_here" }

Returns:

• 200: Successfully logged out
• 400: Invalid or missing refresh token
• 401: User not authenticated