Authenticate user and issue tokens

curl --request POST \
     --url https://api.upstartcommerce.com/api/v1/auth/login \
     --header 'accept: application/json' \
     --header 'content-type: application/json' \
     --data-raw '{
     "username": "[email protected]",
     "password": "securePassword123",
     "tokenType": "consumer"
     }'

var myHeaders = new Headers();
myHeaders.append("accept", "application/json");
myHeaders.append("content-type", "application/json");

var raw = JSON.stringify({
   "username": "[email protected]",
   "password": "securePassword123",
   "tokenType": "consumer"
});

var requestOptions = {
   method: 'POST',
   headers: myHeaders,
   body: raw,
   redirect: 'follow'
};

fetch("https://api.upstartcommerce.com/api/v1/auth/login", requestOptions)
   .then(response => response.text())
   .then(result => console.log(result))
   .catch(error => console.log('error', error));

require "uri"
require "json"
require "net/http"

url = URI("https://api.upstartcommerce.com/api/v1/auth/login")

https = Net::HTTP.new(url.host, url.port)
https.use_ssl = true

request = Net::HTTP::Post.new(url)
request["accept"] = "application/json"
request["content-type"] = "application/json"
request.body = JSON.dump({
   "username": "[email protected]",
   "password": "securePassword123",
   "tokenType": "consumer"
})

response = https.request(request)
puts response.read_body

import requests
import json

url = "https://api.upstartcommerce.com/api/v1/auth/login"

payload = json.dumps({
   "username": "[email protected]",
   "password": "securePassword123",
   "tokenType": "consumer"
})
headers = {
   'accept': 'application/json',
   'content-type': 'application/json'
}

response = requests.request("POST", url, headers=headers, data=payload)

print(response.text)

// Authentication result. Either:

Successful authentication with tokens (mfaRequired=false or absent)
MFA challenge required (mfaRequired=true)
{
  "mfaRequired": false,
  "accessToken": "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9...",
  "refreshToken": "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9...",
  "expiresIn": 3600,
  "tokenType": "Bearer",
  "mfaChallengeId": "ch_abc123xyz",
  "mfaMethod": "totp",
  "mfaExpiresIn": 300,
  "mfaMaskedPhoneNumber": "***1234"
}

// Authentication result. Either:

Successful authentication with tokens (mfaRequired=false or absent)
MFA challenge required (mfaRequired=true)
{
  "mfaRequired": false,
  "accessToken": "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9...",
  "refreshToken": "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9...",
  "expiresIn": 3600,
  "tokenType": "Bearer",
  "mfaChallengeId": "ch_abc123xyz",
  "mfaMethod": "totp",
  "mfaExpiresIn": 300,
  "mfaMaskedPhoneNumber": "***1234"
}

// Successful login (no MFA)
{
  "mfaRequired": false,
  "accessToken": "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9...",
  "refreshToken": "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9...",
  "expiresIn": 3600,
  "tokenType": "Bearer"
}

// MFA verification required
{
  "mfaRequired": true,
  "mfaChallengeId": "ch_abc123xyz",
  "mfaMethod": "totp",
  "mfaExpiresIn": 300
}

// Bad request - invalid JSON, missing fields, or tenant selection required
{
  "error": "unauthorized",
  "message": "Invalid username or password",
  "code": "UNAUTHORIZED"
}

// Bad request - invalid JSON, missing fields, or tenant selection required
{
  "error": "unauthorized",
  "message": "Invalid username or password",
  "code": "UNAUTHORIZED"
}

// Invalid request body
{
  "error": "invalid_request",
  "message": "Failed to read request body",
  "code": "BAD_REQUEST"
}

// Tenant selection required
{
  "error": "tenant_required",
  "message": "Multiple tenants available; tenant selection required via x-upstart-tenant header",
  "code": "TENANT_REQUIRED"
}

// Invalid token type
{
  "error": "invalid_request",
  "message": "Invalid token type. Must be 'consumer' or 'management'",
  "code": "BAD_REQUEST"
}

// Invalid credentials
{
  "error": "unauthorized",
  "message": "Invalid username or password",
  "code": "UNAUTHORIZED"
}

// Forbidden - unauthorized tenant or no authorized tenants
{
  "error": "unauthorized",
  "message": "Invalid username or password",
  "code": "UNAUTHORIZED"
}

// Forbidden - unauthorized tenant or no authorized tenants
{
  "error": "unauthorized",
  "message": "Invalid username or password",
  "code": "UNAUTHORIZED"
}

// Unauthorized tenant
{
  "error": "unauthorized_tenant",
  "message": "User is not authorized for tenant: tenant-xyz",
  "code": "UNAUTHORIZED_TENANT"
}

// No authorized tenants
{
  "error": "forbidden",
  "message": "User has no authorized tenants",
  "code": "FORBIDDEN"
}

// Internal server error
{
  "error": "unauthorized",
  "message": "Invalid username or password",
  "code": "UNAUTHORIZED"
}

// Internal server error
{
  "error": "unauthorized",
  "message": "Invalid username or password",
  "code": "UNAUTHORIZED"
}

// Token generation failed
{
  "error": "internal_error",
  "message": "Token generation failed",
  "code": "INTERNAL_SERVER_ERROR"
}

// Upstream service error
{
  "error": "internal_error",
  "message": "Failed to communicate with authentication backend",
  "code": "INTERNAL_SERVER_ERROR"
}