CXOPIN API

Authentication

Email sessions, and the OAuth methods that still need configuration.

Email registration stores a scrypt password hash and sets an HTTP-only session cookie. The cookie value is random. The database stores only its SHA-256 hash.

OAuth

Google, GitHub, and Microsoft buttons call the API and return a configuration error. Adding client credentials does not enable a login callback in this stage.

POST /v1/auth/register
POST /v1/auth/login
POST /v1/auth/logout
GET  /v1/auth/me