Authentication Example

v1.1.0

This guide demonstrates the complete JWT authentication flow generated by the package.

---

Authentication Flow

---

Login

POST /api/auth/login

Request:

{
  "email": "john@example.com",
  "password": "secret123"
}

Response:

{
  "type": "success",
  "status": 200,
  "data": {
    "access_token": "...",
    "token_type": "Bearer",
    "expires_in": 3600
  }
}

---

Current User

GET /api/auth/me

Header:

Authorization: Bearer TOKEN

Returns the authenticated user.

---

Refresh Token

POST /api/auth/refresh

Returns a new JWT while invalidating the previous one.

---

Logout

POST /api/auth/logout

Invalidates the current token.

---

Internal Login Flow

Request
    ↓
LoginRequest
    ↓
JWT Guard
    ↓
Token
    ↓
JSON Response

The generated Controller already handles invalid credentials using standardized error responses.

---

Common Error Responses

Invalid credentials:

{
  "type": "error",
  "status": 401
}

Missing token:

{
  "type": "error",
  "status": 401
}

Expired token:

{
  "type": "error",
  "status": 401
}

Authentication endpoints follow the same response structure used across the entire package.