Skip to content
SAMA chat server Docs Changelog

Login User API


Overview

Section titled “Overview”
POST /login

The request will allow the user to log into the system and share their device ID to receive all other requests from other users or events.

Request Parametrs

Section titled “Request Parametrs”

Possible authorization request options:

{
  "organization_id": "680a2fae96cc69d78861f101",
  "login": "login_u1",
  "password": "u1_password",
  "device_id": "device_u1"
}

Response Fields

Section titled “Response Fields”

All variations of the query will have the same response:

{
  "user": {
      "_id": "63480e68f4794709f802a2fa",
      "login" :"login_u1",
      "created_at": "2022-10-13T13:11:04.447Z",
      "updated_at": "2022-10-13T13:11:04.447Z"
    },
  "access_token": "...",
  "expired_at": timestamp_in_ms
}
  • expired_at - the time when the access_token will expire

Final Step

Section titled “Final Step”

After receiving the access_token, the client must send a request to connect the socket to the server and link it to the current access_token:

{
  "request": {
    "connect": {
      "token": "access_token",
      "device_id": "device_u1"
    },
    "id": "RequestId"
  }
}
 
{ "response": { "id": "RequestId", "success": true } }

Old Websocket Requests Deprecated

Section titled “Old Websocket Requests ”

Examples

Section titled “Examples”
{
  "request": {
    "user_login": {
      "organization_id": "680a2fae96cc69d78861f101",
      "login": "user_1",
      "password": "user_paswword_1",
      "device_id": "xxx-yyy-zzz"
    },
    "id": "RequestId"
  }
}
 
{
  "response": {
    "id": "RequestId",
    "user": {
      "_id": "63480e68f4794709f802a2fa",
      "created_at": "2022-10-13T13:11:04.447Z",
      "updated_at": "2022-10-13T13:11:04.447Z",
      "login" :"user_1"
    },
    "token": "..."
  }
}

Later, the subsequent logins can be done via token:

{
  "request": {
    "user_login": {
      "token": "..."
    },
    "id": "RequestId"
  }
}
 
{ "response": { "id": "RequestId", "user": { ... }, "token": "..." } }

See Also

Section titled “See Also”
SAMA Progressive AUTH flow During the last month 📆, we have been implementing and testing a new authorization flow for our API.
Progressive AUTH flow in Web apps In today’s digital landscape, balancing robust security with an effortless user experience is more crucial than ever. Enter Progressive AUTH — a dynamic approach to authentication that...