Authentication API

Endpoints for user authentication and token management.

Signup

POST /api/signup

Create a new user account.

Request Body:

{
  "username": "johndoe",
  "email": "john@example.com",
  "password": "yourpassword"
}

Field	Type	Required	Description
username	string	Yes	Unique username
email	string	Yes	Valid email address
password	string	Yes	Minimum 6 characters

Response:

{
  "message": "User registered successfully",
  "user": {
    "id": "user_id",
    "username": "johndoe",
    "email": "john@example.com"
  }
}

Example:

curl -X POST https://your-vsay-instance.com/api/signup \
  -H "Content-Type: application/json" \
  -d '{"username": "johndoe", "email": "john@example.com", "password": "yourpassword"}'

---

Login

POST /api/login

Authenticate and receive a JWT token.

Request Body:

{
  "email": "john@example.com",
  "password": "yourpassword"
}

Response:

{
  "message": "Login successful",
  "token": "eyJhbGciOiJIUzI1NiIs...",
  "user": {
    "id": "user_id",
    "username": "johndoe",
    "email": "john@example.com",
    "api_key": "your_api_key_for_agents"
  }
}

Example:

curl -X POST https://your-vsay-instance.com/api/login \
  -H "Content-Type: application/json" \
  -d '{"email": "john@example.com", "password": "yourpassword"}'

Token Expiration

JWT tokens expire after 24 hours. Use the refresh endpoint to get a new token.

---

Refresh Token

POST /api/auth/refresh

Get a new JWT token using your current valid token.

Headers:

Authorization: Bearer YOUR_CURRENT_TOKEN

Response:

{
  "token": "eyJhbGciOiJIUzI1NiIs..."
}

Example:

curl -X POST https://your-vsay-instance.com/api/auth/refresh \
  -H "Authorization: Bearer YOUR_CURRENT_TOKEN"

---

Using Authentication

HTTP Requests

Include the JWT token in Authorization header:

curl -H "Authorization: Bearer YOUR_JWT_TOKEN" \
  https://your-vsay-instance.com/api/machines

WebSocket Connections

Pass the token as a query parameter:

wss://your-vsay-instance.com/api/terminal/:agent_id/ws?token=YOUR_JWT_TOKEN

Agent Registration

Use your API key (from login response) when registering agents:

vsay-agent --token YOUR_API_KEY --host your-vsay-instance.com