Login & session

Authenticating an existing consumer and ending a session.

📄️Log in with an identifier + password

Rate-limited per identifier. Any identifier type works on any touchpoint (email,

📄️Identify-or-create a consumer (operator-assisted touchpoints)

For touchpoints in `OPERATOR` authentication mode (e.g. a promoter's data-capture app,

📄️Request a password-reset code

Always `200`, whether or not the identifier exists (does not leak account existence).

📄️Reset a password using the forgot-password code

Reset a password using the forgot-password code

📄️End the current session

Stateless on edge's side — the client discards its Customer JWT.