Login
curl --request POST \
--url https://api.example.com/auth/loginimport requests
url = "https://api.example.com/auth/login"
response = requests.post(url)
print(response.text)const options = {method: 'POST'};
fetch('https://api.example.com/auth/login', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.example.com/auth/login",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "https://api.example.com/auth/login"
req, _ := http.NewRequest("POST", url, nil)
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://api.example.com/auth/login")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.example.com/auth/login")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
response = http.request(request)
puts response.read_body{
"token": "<string>"
}Authentication
Login
Authenticate user and receive JWT token
POST
/
auth
/
login
Login
curl --request POST \
--url https://api.example.com/auth/loginimport requests
url = "https://api.example.com/auth/login"
response = requests.post(url)
print(response.text)const options = {method: 'POST'};
fetch('https://api.example.com/auth/login', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.example.com/auth/login",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "https://api.example.com/auth/login"
req, _ := http.NewRequest("POST", url, nil)
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://api.example.com/auth/login")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.example.com/auth/login")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
response = http.request(request)
puts response.read_body{
"token": "<string>"
}The login endpoint authenticates a user and returns a JWT (JSON Web Token) that can be used for subsequent authenticated requests. The token is generated using the HS256 signing algorithm and is valid for 10 hours from the time of issuance.
Token generation logic (
Implementation Details
The endpoint is implemented inAuthController.java:16 and uses the JwtService to generate tokens. The JWT includes:
- Subject: The username
- Issued At: Current timestamp
- Expiration: 10 hours from issuance (36,000,000 milliseconds)
- Signature Algorithm: HS256
Request Body
string
required
The username for authentication. This will be set as the subject claim in the JWT token.
string
required
The user’s password for authentication.
Response
string
A JWT token string that can be used for authenticating subsequent API requests. The token expires 10 hours after generation.
Success Response
Status Code:200 OK
The endpoint returns a plain string containing the JWT token.
Example Request
curl -X POST http://localhost:8080/auth/login \
-H "Content-Type: application/json" \
-d '{
"username": "user@example.com",
"password": "password123"
}'
Example Response
"eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJ1c2VyQGV4YW1wbGUuY29tIiwiaWF0IjoxNzQxNzQ2MDAwLCJleHAiOjE3NDE3ODIwMDB9.Xj8kQ9Z5vN2xK3pL7wR1mY6tH8sF4dG9cA5bE3nM2oP"
Code Reference
The login controller (AuthController.java:16-18):
@PostMapping("/login")
public String login(@RequestBody LoginRequest loginRequest) {
System.out.println("El usuario " + loginRequest.getUsername() + " está intentando entrar");
return jwtService.generateToken(loginRequest.getUsername());
}
JwtService.java:19-27):
public String generateToken(String username) {
return Jwts.builder()
.setSubject(username)
.setIssuedAt(new Date(System.currentTimeMillis()))
.setExpiration(new Date(System.currentTimeMillis() + 1000 * 60 * 60 * 10))
.signWith(KEY, SignatureAlgorithm.HS256)
.compact();
}
Notes
- The current implementation does not validate the password against a database
- The token expiration is set to 10 hours (configurable in
JwtService.java:23) - The endpoint logs authentication attempts to the console
⌘I