Skip to main content

Login

All endpoints require session authentication. After login, the session object contains a usuario field with user details.

POST /usuarios/login

Authenticate a user and create a session. Request Body
indicador
string
required
Username (3-51 characters, letters only, no numbers)
password
string
required
User password (6-30 characters)
Validation Rules
  • indicador:
    • Must be at least 3 characters
    • Maximum 51 characters
    • Cannot contain numbers
    • Automatically converted to uppercase
  • password:
    • Minimum 6 characters
    • Maximum 30 characters
Response
success
string
Success message: “¡Usuario Correcto!”
errors.indicador
string
Error message for username validation failures
errors.password
string
Error message for password validation failures
Session Object Created On successful login, req.session.usuario contains:
{
  "indicador": "USERNAME",
  "nombre": "First Name",
  "apellido": "Last Name",
  "cargo": "Position/Role",
  "tipo_usuario": "Administrador|Analista|Desarrollador"
}
Example Request
curl -X POST http://localhost/usuarios/login \
  -H "Content-Type: application/x-www-form-urlencoded" \
  -d "indicador=PEREZJ&password=mypassword123"
Example Response
{
  "success": "¡Usuario Correcto!"
}

Logout

GET /close

Destroy the user session and log out. Response Redirects to home page (clears req.session.usuario) Example Request
curl http://localhost/close

Password Management

GET /password

Get the password change form (requires active session). Response Returns password change form view with user type

POST /password

Change the current user’s password. Authentication Required: Active session Request Body
password
string
required
Current password (6-30 characters)
pass1
string
required
New password (6-30 characters, must be different from current)
pass2
string
required
New password confirmation (must match pass1)
Validation Rules
  • Current password must be correct
  • New password must be different from current password
  • New password and confirmation must match
  • All passwords must be 6-30 characters
Response
redirect
string
On success, redirects to /close (logs out user)
errors.password
string
Error for current password validation
errors.pass1
string
Error for new password validation
errors.pass2
string
Error for password confirmation validation
Example Request
curl -X POST http://localhost/password \
  -H "Content-Type: application/x-www-form-urlencoded" \
  --cookie "connect.sid=SESSION_ID" \
  -d "password=currentpass&pass1=newpassword123&pass2=newpassword123"
Example Response
Redirects to /close (logout page)

Build docs developers (and LLMs) love