Guide

Passwordless authentication

Sign-in is email-based. Users request a magic link, verify once, and then operate the dashboard through a secure HttpOnly session cookie.

How it works

  1. Call Magic Link Login with an email address.
  2. The user opens the emailed link and hits Verify Magic Link.
  3. The API creates a 30-day session cookie and redirects to the dashboard.

Example

curl -X POST "https://util.axolite.app/v1/auth/login" \
  -H "Content-Type: application/json" \
  -d '{
    "email": "[email protected]"
  }'