After you have created your account — either as a student via email activation or as a general user via direct registration — you useDocumentation Index
Fetch the complete documentation index at: https://mintlify.com/Daniel-Stojanovski/finkiopendesk/llms.txt
Use this file to discover all available pages before exploring further.
POST /auth/login to obtain a JWT. That JWT goes into the Authorization: Bearer header of every call to a protected endpoint. This page walks through the login flow, shows how to wire up the token in both frontend and backend code, and covers the authenticated user-profile endpoints.
Log in
Call POST /auth/login
Send your email and password as JSON.Request body:
| Field | Type | Description |
|---|---|---|
email | string | The email address you registered with |
password | string | Your account password |
Receive the JWT
A successful login returns This token is valid for 24 hours. After it expires, call
200 OK. The response body is the raw JWT string:POST /auth/login again to get a fresh one.Store and use the token
Include the token in the See the Using the token section below for frontend and curl examples.
Authorization header of every request to a protected endpoint:Using the token
- curl
- TypeScript (fetch)
- TypeScript (axios)
Pass the token in the
Authorization header on every protected request:User-profile endpoints
All three endpoints below require a validAuthorization: Bearer <token> header.
GET /auth/user
Returns the profile of the currently authenticated user.POST /auth/user/program/
Assigns an academic program to your account. TheprogramId path parameter is the identifier of the program you want to select.
200 OK with an empty body on success.
DELETE /auth/user/program
Removes the currently assigned academic program from your account.200 OK with an empty body on success.
Token reference
| Property | Value |
|---|---|
| Algorithm | HS256 |
| Lifetime | 24 hours |
Subject claim (sub) | User UUID |
| Additional claims | email, student (boolean) |
| Transport | Authorization: Bearer <token> header |
Error reference
| Scenario | HTTP status |
|---|---|
| Missing or invalid token | 401 Unauthorized |
| Expired token | 401 Unauthorized |
| Wrong email or password | 500 (invalid credentials) |
| Account not activated (student) | 500 (user not activated) |