| 方法 | 路径 | 摘要 | 认证 |
|---|---|---|---|
| POST | /v1/auth/login | Authenticate and create a refresh-token family | 无需认证 |
| POST | /v1/auth/login-captchas | Issue a one-time built-in sign-in CAPTCHA bound to the source address | 无需认证 |
| POST | /v1/auth/login-challenge-verifications | Consume one verification code and create a login session | 无需认证 |
| POST | /v1/auth/login-challenges | Queue a login code or the additional code required after password verification | 无需认证 |
| GET | /v1/auth/login-methods | Read enabled email and SMS login methods | 无需认证 |
| POST | /v1/auth/logout | Revoke the refresh-token family | API Key 可调 |
| GET | /v1/auth/me | Return the current user, scope, roles, and permissions | 登录会话 |
| POST | /v1/auth/member-invitations/accept | Accept an invitation and create the read-only sub-account (anonymous; the token is the credential) | 无需认证 |
| POST | /v1/auth/refresh | Rotate the refresh token and issue a new access token | API Key 可调 |
| POST | /v1/auth/register | Register a tenant owner account | 无需认证 |
| POST | /v1/auth/registration-challenge-verifications | Consume one contact verification code and issue a registration proof cookie | 无需认证 |
| POST | /v1/auth/registration-challenges | Verify a human and queue one contact verification code | 无需认证 |
| POST | /v1/auth/session-region-verifications | Re-bind the session to its current region with the password | 登录会话 |
契约文件：api/openapi/v1/control.yaml api/openapi/v1/account-login-challenge.yaml api/openapi/v1/account-registration.yaml api/openapi/v1/account-registration-challenge.yaml