Skip to Content
SeyloDocs
API referenceSign-in and account

Confirm it's you

POST
/api/v1/auth.reauth

Confirms the signed-in person with exactly one of: the password, a code (6-digit authenticator code or an unused recovery code, which is used up), or a passkey assertion for the ticket from auth.reauthPasskeyBegin. The session then counts as freshly signed in for 15 minutes. A wrong answer is BAD_REQUEST with details.field "password", "code" or "passkey". Browser sessions only.

Any signed-in caller. Not available to MCP clients or the assistant.

Authorization

cookieseylo_session<token>

Request Body

application/json
  1. body
password?string
Length1 <= length <= 1024
code?string
Length6 <= length <= 32
passkey?

Response Body

Success.

application/json
  1. response
freshUntil*string
Formatdate-time
Example Request
curl -X POST 'https://example.com/api/v1/auth.reauth' \  -H 'Content-Type: application/json' \  -d '{}'
Example Response
{  "freshUntil": "2019-08-24T14:15:22Z"}

Get your UI preferences GET

Returns the signed-in person's UI preferences (collapsed projects, color mode and similar). Any signed-in caller. Not available to MCP clients or the assistant.

Start confirming it's you with a passkey POST

Returns WebAuthn request options for navigator.credentials.get, limited to the signed-in person's passkeys, and a ticket for auth.reauth. UNAVAILABLE without a panel domain, CONFLICT when the account has no passkey. Any signed-in caller. Not available to MCP clients or the assistant.