Authentication API

All API requests require authentication via Bearer tokens. Obtain a token by calling the login endpoint with valid credentials.

Base URL: https://api.tracknexus.in/v1

All requests must include:

• •**Authorization** header with Bearer token
• •**Content-Type** header set to application/json

Authenticate a user and receive an access token.

**Request Body:**

• •**email** (string, required) — User email address
• •**password** (string, required) — User password

**Response (200 OK):**

• •accessToken — JWT access token (expires in 1 hour)
• •refreshToken — Refresh token (expires in 30 days)
• •user — User profile object

**Error Responses:**

• •401 — Invalid credentials
• •429 — Too many login attempts (rate limited)

Refresh an expired access token.

**Request Body:**

• •**refreshToken** (string, required) — Valid refresh token

**Response (200 OK):**

• •accessToken — New JWT access token
• •refreshToken — New refresh token

**Error Responses:**

• •401 — Invalid or expired refresh token

Email OTP authentication endpoints:

**POST /auth/check-mfa** — Send a 6-digit OTP code to the user's email **POST /auth/login-mfa** — Verify the OTP code and complete login

OTP codes expire after 15 minutes with a maximum of 3 verification attempts.