Authorization header on every subsequent request.
Obtaining a token
Send aPOST request to /api/users/auth with your email address and password.
Endpoint
Request body
The email address associated with your Rakcha account.
Your account password.
Response fields
A signed JWT to use as your bearer token in subsequent requests.
The authenticated user object.
Example request
Example response
Using the token
Include the token in theAuthorization header on every request that requires authentication:
Tokens are time-limited. If your token expires, repeat the authentication request to obtain a new one.
401 Unauthorized
If theAuthorization header is missing, malformed, or contains an expired token, the API returns 401 Unauthorized:
401:
- Confirm the
Authorizationheader is present and formatted asBearer <token>. - Check that the token has not expired — re-authenticate to obtain a fresh token.
- Verify the email and password are correct for the target environment.