API reference/Auth

Delete the account

DELETE /v1/auth/me

Requires the password, and with two-factor authentication on a code, recovery code or passkey response (start one with POST /v1/auth/passkeys/verification). Signs out every device.

Authorization

bearer

Authorizationheader · stringrequired

Session token from POST /v1/auth/login with "transport": "bearer". Browsers use the session cookie that login sets instead.

Body

application/json

passwordstringrequired

maxLength: 512

codestring

With two-factor authentication on: a code from the authenticator app

maxLength: 16

passkeyobject

With two-factor authentication on, a passkey's response instead of code

2 fields

ceremony_tokenstringrequired

From POST /v1/auth/login/mfa/passkey when signing in, or POST /v1/auth/passkeys/verification when signed in

maxLength: 256

credentialobjectrequired

The PublicKeyCredential from navigator.credentials.get(), as JSON

recovery_codestring

With two-factor authentication on, instead of code

maxLength: 32

Responses

errors: application/problem+json

204

No Content

401

Unauthorized

422

Unprocessable Entity

500

Internal Server Error

503

Service Unavailable

Match errors on the problem's code, which stays the same, not on its message.

curl -X DELETE "$API_URL/v1/auth/me" \ -H "Authorization: Bearer $TOKEN" \ -H "Content-Type: application/json" \ -d '{ "password": "string", "code": "123456", "passkey": { "ceremony_token": "string", "credential": {} }, "recovery_code": "abcde-fghij" }'

body := strings.NewReader(`{ "password": "string", "code": "123456", "passkey": { "ceremony_token": "string", "credential": {} }, "recovery_code": "abcde-fghij" }`) req, err := http.NewRequestWithContext(ctx, http.MethodDelete, apiURL + "/v1/auth/me", body) if err != nil { return err } req.Header.Set("Authorization", "Bearer "+token) req.Header.Set("Content-Type", "application/json") res, err := http.DefaultClient.Do(req) if err != nil { return err } defer res.Body.Close()

const res = await fetch(`${apiUrl}/v1/auth/me`, { method: "DELETE", headers: { Authorization: `Bearer ${token}`, "Content-Type": "application/json", }, body: JSON.stringify({ "password": "string", "code": "123456", "passkey": { "ceremony_token": "string", "credential": {} }, "recovery_code": "abcde-fghij" }), });

{ "code": "string", "status": 422, "title": "Unprocessable Entity", "detail": "string", "errors": [ { "message": "expected length >= 1", "location": "body.name" } ], "request_id": "req_9f86d081884c7d65", "type": "string" }