Endpoints

Not Authenticated (No JWT needed)

• GET /app/all

Authenticated via API key

Example:

curl --location --request POST 'http://url:3000/auth/register' \
--header 'X-API-KEY: apikeyhere'

• POST /auth/verify-otp
• POST /auth/register
• POST /auth/login

Authenticated via JWT

JWT should be sent as a header "Authorization" bearer token

Example:

curl --location --request POST 'http://url:3000/' \
--header 'Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJVc2VySUQiOiI3MmM5YzcxYi05OGRjLTQ2MDYtODI2Zi1iYjI3ODRkNjg0NDYiLCJFbWFpbCI6ImpvaG5kb0BleGFtcGxlLmNvbSIsIlVzZXJuYW1lIjoiam9obmVEb2UiLCJPcGVyYXRvciI6dHJ1ZSwiZXhwIjoxNzMxODQzOTI1fQ.UPOs4DTCszlibDJVY_Pj55ZC_xwVkNANPAiZdVN85Ts'

You will need to create a user with register and then login to get the JWT

The operator role is required for your user to make these calls:

• POST /operator/profile/create-bulk
• POST /operator/profile/register
• POST /operator/profile/reset-user-password
• POST /operator/userinfo
• POST /operator/userinfo/update
• GET /operator/users/deleted
• GET /operator/users/delete/:email
• GET /operator/users/profile/:userid/:appid

These calls do not require a special user

• GET /auth/verify
• POST /auth/enable-otp
• GET /auth/refresh-disable
• POST /auth/refresh
• POST /auth/reset-password
• GET /auth/logout
• POST /user/userinfo/update
• GET /user/profiles/:appid
• POST /user/profiles/create
• GET /user/delete