API Endpoints Reference
Authentication Endpoints
Register User
POST /api/users/register Content-Type: application/json { "email": "user@example.com", "password": "securepassword", "name": "John Doe" }
User Login
POST /api/users Content-Type: application/json { "email": "user@example.com", "password": "securepassword" }
User Logout
POST /api/users/logout Authorization: Bearer {{session_token}}
Session Management
Validate Session
GET /api/sso/validate Authorization: Bearer {{session_token}}
Get Session Status
GET /api/users/session-status Authorization: Bearer {{session_token}}
User Management
Get User Profile
GET /api/users/{{userId}} Authorization: Bearer {{session_token}}
Update User Profile
PATCH /api/users/{{userId}} Authorization: Bearer {{session_token}} Content-Type: application/json { "name": "Updated Name", "email": "newemail@example.com" }
API Rate Limits
API endpoints are subject to rate limiting to ensure service stability. Current limits are:
- Authentication endpoints: 10 requests per minute
- Session validation: 60 requests per minute
- User profile operations: 30 requests per minute
Rate limit status is returned in response headers:
X-Rate-Limit-Limit: 60 X-Rate-Limit-Remaining: 58 X-Rate-Limit-Reset: "2025-07-22T06:36:38Z"