| Method | Path | Summary | Auth |
|---|---|---|---|
| POST | /v1/auth/login | Authenticate and create a refresh-token family | Public |
| POST | /v1/auth/login-captchas | Issue a one-time built-in sign-in CAPTCHA bound to the source address | Public |
| POST | /v1/auth/login-challenge-verifications | Consume one verification code and create a login session | Public |
| POST | /v1/auth/login-challenges | Queue a login code or the additional code required after password verification | Public |
| GET | /v1/auth/login-methods | Read enabled email and SMS login methods | Public |
| POST | /v1/auth/logout | Revoke the refresh-token family | API key |
| GET | /v1/auth/me | Return the current user, scope, roles, and permissions | Session |
| POST | /v1/auth/member-invitations/accept | Accept an invitation and create the read-only sub-account (anonymous; the token is the credential) | Public |
| POST | /v1/auth/refresh | Rotate the refresh token and issue a new access token | API key |
| POST | /v1/auth/register | Register a tenant owner account | Public |
| POST | /v1/auth/registration-challenge-verifications | Consume one contact verification code and issue a registration proof cookie | Public |
| POST | /v1/auth/registration-challenges | Verify a human and queue one contact verification code | Public |
| POST | /v1/auth/session-region-verifications | Re-bind the session to its current region with the password | Session |
Contract file：api/openapi/v1/control.yaml api/openapi/v1/account-login-challenge.yaml api/openapi/v1/account-registration.yaml api/openapi/v1/account-registration-challenge.yaml