Skip to main content
POST
auth.password.signin

Authorizations

Authorization
string
header
required

A Lath API key: lath_live_… or lath_test_… on a server, lath_live_pk… or lath_test_pk… in a browser.

Headers

Idempotency-Key
string

Replays the stored response for the same key and input; refuses different input.

Body

application/json
identifier
string
required
Required string length: 3 - 320
password
string
required
Required string length: 1 - 256
userAgent
string
Maximum string length: 400
redirectTo
string

Receive a redirect with a one-time code instead of the tokens; must be an allowed redirect origin

Maximum string length: 2000

Response

{ activityId, result }. activityId is empty for reads.

activityId
string
required

The activity this call created, or empty for a read.

result
object
required
Last modified on September 23, 2026