Skip to main content
POST
Sign in through the gated failed-login lockout proxy

Body

application/json
email
string<email>
required
password
string
required
captcha_token
string | null

Required when Auth CAPTCHA is enabled; forwarded to Supabase Auth for validation.

Response

Supabase Auth password token response

access_token
string
required
refresh_token
string
required
expires_in
integer
token_type
string
user
object

Supabase Auth user object proxied verbatim from the upstream auth service; the shape is owned by Supabase, deliberately open.