Authentication
POST/api/v1/auth/login
POST/api/v1/auth/register
POST/api/v1/auth/refresh
POST/api/v1/auth/logout
POST/api/v1/auth/verify-email
Users
GET/api/v1/users
GET/api/v1/users/{id}
PUT/api/v1/users/{id}
DELETE/api/v1/users/{id}
GET/api/v1/auth/me
Enrollment
GET/api/v1/enrollments
POST/api/v1/users/{userId}/enrollments
GET/api/v1/enrollments/{id}
PUT/api/v1/users/{userId}/enrollments/{methodType}/complete
DELETE/api/v1/enrollments/{id}
OAuth 2.0 / OIDC
GET/api/v1/oauth2/authorize
POST/api/v1/oauth2/token
GET/api/v1/oauth2/userinfo
GET/.well-known/jwks.json
GET/.well-known/openid-configuration
Auth Flows
GET/api/v1/tenants/{tenantId}/auth-flows
POST/api/v1/tenants/{tenantId}/auth-flows
GET/api/v1/tenants/{tenantId}/auth-flows/{id}
PUT/api/v1/tenants/{tenantId}/auth-flows/{id}
DELETE/api/v1/tenants/{tenantId}/auth-flows/{id}
Sessions
GET/api/v1/sessions
DELETE/api/v1/sessions/{id}
GET/api/v1/my/activity
WebAuthn (Passkeys)
POST/api/v1/webauthn/register/options/{userId}
POST/api/v1/webauthn/register/verify
POST/api/v1/webauthn/authenticate-options
POST/api/v1/webauthn/authenticate
System
GET/api/v1/auth/health
GET/.well-known/openid-configuration