API Endpoints Reference

Authentication Endpoints

Register User

POST /api/users/register
Content-Type: application/json

{
  "email": "user@example.com",
  "password": "securepassword",
  "name": "John Doe"
}

User Login

POST /api/users
Content-Type: application/json

{
  "email": "user@example.com",
  "password": "securepassword"
}

User Logout

POST /api/users/logout
Authorization: Bearer {{session_token}}

Session Management

Validate Session

GET /api/sso/validate
Authorization: Bearer {{session_token}}

Get Session Status

GET /api/users/session-status
Authorization: Bearer {{session_token}}

User Management

Get User Profile

GET /api/users/{{userId}}
Authorization: Bearer {{session_token}}

Update User Profile

PATCH /api/users/{{userId}}
Authorization: Bearer {{session_token}}
Content-Type: application/json

{
  "name": "Updated Name",
  "email": "newemail@example.com"
}

API Rate Limits

API endpoints are subject to rate limiting to ensure service stability. Current limits are:

  • Authentication endpoints: 10 requests per minute
  • Session validation: 60 requests per minute
  • User profile operations: 30 requests per minute

Rate limit status is returned in response headers:

X-Rate-Limit-Limit: 60
X-Rate-Limit-Remaining: 58
X-Rate-Limit-Reset: "2025-07-22T06:36:38Z"