Auth API - SchedKit

Endpoints

Method	Path	Description
`POST`	`/v1/auth/login`	Login, set session cookie
`POST`	`/v1/auth/logout`	Logout, clear session
`GET`	`/v1/auth/me`	Get current user

{
  "email": "you@example.com",
  "password": "your-password"
}

Response 200 — sets schedkit_session HTTP-only cookie

{
  "id": 42,
  "email": "you@example.com",
  "name": "Your Name",
  "slug": "yourname",
  "plan": "starter"
}

POST /v1/auth/logout

Clears the session cookie. No body required. Response 200

{ "ok": true }

GET /v1/auth/me

Returns the currently authenticated user. Works with both cookie and x-api-key auth. Response 200

{
  "id": 42,
  "email": "you@example.com",
  "name": "Your Name",
  "slug": "yourname",
  "plan": "starter",
  "timezone": "America/Chicago",
  "created_at": "2026-03-01T00:00:00Z"
}

Response 401 — not authenticated

{ "error": "Unauthorized" }

​Endpoints

​POST /v1/auth/login

​POST /v1/auth/logout

​GET /v1/auth/me

Endpoints

POST /v1/auth/login

POST /v1/auth/logout

GET /v1/auth/me