Authentication

Login, logout, signup, email verification and password management.

Change password

Change the authenticated user's password. Returns a fresh API token.

Login

Authenticate with username and password to receive an API token.

Logout

Invalidate the caller's API token.

Request password reset

Send a password reset email if the address exists. Always returns success to prevent email enumeration.

Confirm password reset

Set a new password using the uid and token from the reset email.

Validate password reset token

API endpoint for validating a password reset token.

resend_verification_create

Body: { 'email': 'user@example.com' }

signup_create

Body: { 'username': '…', 'password': '…', 'email': '…' }

Verify email address

Verifies user's email address when they click the verification link.