Sign-in

Send the email confirmation link again

Send a password reset link

Always answers the same, whether or not the email has an account.

Body

email*

string (email)

Email a sign-in code

Always answers the same, so it never tells whether an email has an account.

Body

email*

string (email) · max length 255

Sign in with the emailed code

Returns a bearer token for this device. Five wrong codes end the code.

Body

email*

string (email) · max length 255

code*

string · min length 6 · max length 6

device_name*

string · max length 120

name

string | null · max length 255

Sign in

Returns a token, or `two_factor_required: true` with a `challenge` to send to `POST /auth/two-factor` together with the code from the authenticator app.

Body

email*

string (email)

password*

string

device_name*

string · max length 120 · A name for this device, shown in the account's list of signed-in devices.

Sign out this device

Ends the token used for this request.

Create a team account

The new account then creates its first restaurant with `POST /me/restaurants` (which also takes a sign-up `offer` code).

Body

name*

string · max length 255

email*

string (email) · max length 255

password*

string

device_name*

string · max length 120

password_confirmation*

string

Second sign-in step

Send the `challenge` from `/auth/login` with either the 6-digit `code` from the authenticator app or one `recovery_code`.

Body

challenge*

string

code

string | null · max length 12

recovery_code

string | null · max length 24

device_name*

string · max length 120