Sign in verified administrator

Returns bearer token and only active authorized businesses. Session lifetime is 7 days. This implemented foundation endpoint is administrator-only; driver authentication is not implemented. Limit 20 per connection IP per minute.

Authentication

No bearer token required. This does not remove validation or rate limits.

Parameters

No path or query parameters.

Request

Example JSON body

{
  "email": "dispatcher@example.com",
  "password": "Example-passphrase-42!"
}

{
  "$ref": "#/components/schemas/LoginRequest"
}

Example request

Replace synthetic identifiers and credentials. Example dates, coordinates, revisions, and IDs are not production defaults. Read the workflow guide before making a write.

curl --request POST 'https://route-api.okok.space/api/v1/auth/login' \
  --header 'Content-Type: application/json' \
  --data '{"email":"dispatcher@example.com","password":"Example-passphrase-42!"}' \
  --output response.bin

Responses

Examples illustrate the documented shape; optional fields and current state can differ. JSON extraction/body-limit errors may be plain text.

200 · Successful response.

application/json

{
  "token": "REPLACE_WITH_TOKEN",
  "user": {
    "id": "11111111-1111-4111-8111-111111111111",
    "email": "dispatcher@example.com",
    "display_name": "Alex"
  },
  "businesses": [
    {
      "id": "11111111-1111-4111-8111-111111111111",
      "name": "Example Services",
      "time_zone": "Europe/Warsaw",
      "deleted_at": "2026-11-02T09:00:00Z",
      "deleted_by": "11111111-1111-4111-8111-111111111111"
    }
  ]
}

{
  "$ref": "#/components/schemas/LoginResponse"
}

400 · Axum extraction rejects invalid JSON/type, oversized body, or malformed UUID before the domain handler. These responses may be text/plain rather than the domain Error object.

text/plain

Binary response. Save the returned bytes to a file; do not parse as JSON.

401 · Invalid credentials, missing bearer token, or expired/unverified session.

application/json

{
  "error": {
    "code": "unauthorized",
    "message": "Invalid credentials, missing bearer token, or expired/unverified session."
  }
}

{
  "$ref": "#/components/schemas/Error"
}

413 · Axum extraction rejects invalid JSON/type, oversized body, or malformed UUID before the domain handler. These responses may be text/plain rather than the domain Error object.

text/plain

Binary response. Save the returned bytes to a file; do not parse as JSON.

415 · Axum extraction rejects invalid JSON/type, oversized body, or malformed UUID before the domain handler. These responses may be text/plain rather than the domain Error object.

text/plain

Binary response. Save the returned bytes to a file; do not parse as JSON.

429 · Connection-address request limit reached. Retry after the stated interval.

application/json

{
  "error": {
    "code": "rate_limited",
    "message": "Connection-address request limit reached. Retry after the stated interval."
  }
}

{
  "$ref": "#/components/schemas/Error"
}

503 · Required persistence or credential operation unavailable.

application/json

{
  "error": {
    "code": "unavailable",
    "message": "Required persistence or credential operation unavailable."
  }
}

{
  "$ref": "#/components/schemas/Error"
}