Sign in with an email address

POST

/api/auth/sign-in/email

curl --request POST \
  --url http://localhost:3000/api/auth/sign-in/email \
  --header 'Content-Type: application/json' \
  --data '{ "email": "sam@example.com", "password": "correct horse battery staple" }'

• Your Merran

The same as signing in with a username, with the account’s email address instead.

Request Body^required

Media typeapplication/json

object

email

required

Email of the user

string

password

required

Password of the user

string

callbackURL

Callback URL to use as a redirect for email verification

string

rememberMe

If this is false, the session will not be remembered. Default is true.

boolean

Example

{
  "email": "sam@example.com",
  "password": "correct horse battery staple"
}

Responses

200

Success - Returns either session details or redirect URL

Media typeapplication/json

Session response when idToken is provided

object

redirect

required

boolean

token

required

Session token

string

url

string

nullable

user

required

object

id

required

string

name

required

string

email

required

string

emailVerified

required

boolean

image

string

createdAt

required

string format: date-time

updatedAt

required

string format: date-time

username

string

displayUsername

string

role

string

banned

boolean

banReason

string

banExpires

string format: date-time

Example

{
  "redirect": false,
  "token": "sample-session-token",
  "url": null,
  "user": {
    "id": "0199e8b0-5a10-7a01-8b00-000000000001",
    "name": "Sam Rivera",
    "email": "sam@example.com",
    "emailVerified": false,
    "image": null,
    "createdAt": "2026-10-01T17:30:00.000Z",
    "updatedAt": "2026-10-01T17:30:00.000Z",
    "username": "sam",
    "displayUsername": "sam",
    "role": "admin",
    "banned": false
  }
}

400

Bad Request. Usually due to missing parameters, or invalid parameters.

Media typeapplication/json

object

message

required

string

Example ^generated

{
  "message": "example"
}

401

Unauthorized. Due to missing or invalid authentication.

Media typeapplication/json

object

message

required

string

Example ^generated

{
  "message": "example"
}

403

Forbidden. You do not have permission to access this resource or to perform this action.

Media typeapplication/json

object

message

string

Example ^generated

{
  "message": "example"
}

404

Not Found. The requested resource was not found.

Media typeapplication/json

object

message

string

Example ^generated

{
  "message": "example"
}

429

Too Many Requests. You have exceeded the rate limit. Try again later.

Media typeapplication/json

object

message

string

Example ^generated

{
  "message": "example"
}

500

Internal Server Error. This is a problem with the server that you cannot fix.

Media typeapplication/json

object

message

string

Example ^generated

{
  "message": "example"
}