# Simple Auth API
WARNING
While the simple API, is.. well.. simple, it only support the local provider.
The Simple API providers a way to authenticate a username, password, and optional 2FA code, against an endpoint.
# Enabling
authenticators:
simple:
enabled: true # set to true
sharedsecret: null # an optional shared-secret (but you should use it!)
# Using
Endpoint: POST /api/v1/auth/simple
Body:
{
"username": "chris", // email can also be used here
"password": "super-secret",
"totp": "123456" // Optional
}
Security: The endpoint is secured using an optional shared-secret. When provided, pass it to the endpoint via a header:
Authorization: Bearer <shared-secret>
Returns:
200
with a simple payload{"id": "uuid"}
on success403
on failure (bad credentials)401
when you're not allowed to hit this endpoint