Authentication

Admin login with username and password

post

Authenticates an admin user with email and password credentials

Body

application/json

emailstringRequired

Email address of the admin user

Example: [e-mail]

passwordstringRequired

Password for the admin user

Example: password123

Responses

200

Authentication successful

application/json

successbooleanRequired

Indicates if the login was successful

Example: true

access_tokenstringRequired

Access token for authenticated requests

Example: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...

refresh_tokenstringRequired

Refresh token for obtaining new access tokens

Example: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...

local_supabase_urlstringRequired

Browser-accessible Supabase URL that issued the admin session tokens

Example: https://tenant.example.com

local_supabase_anon_keystringRequired

Anon key for the Supabase instance that issued the admin session tokens

Example: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...

userobjectRequired

User information

Example: {"id":"123","email":"[e-mail]","role":"owner"}

errorstringRequired

Error message if login failed

Example: Invalid credentials

401

Unauthorized - Invalid credentials or insufficient permissions

429

Too Many Requests - Rate limit exceeded

500

Internal server error

post/sfp/api/auth/admin/login

HTTPcURLJavaScriptPython

POST /sfp/api/auth/admin/login HTTP/1.1
Content-Type: application/json
Accept: */*
Content-Length: 54

{
  "email": "[e-mail]",
  "password": "password123"
}

{
  "success": true,
  "access_token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...",
  "refresh_token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...",
  "local_supabase_url": "https://tenant.example.com",
  "local_supabase_anon_key": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...",
  "user": {
    "id": "123",
    "email": "[e-mail]",
    "role": "owner"
  },
  "error": "Invalid credentials"
}

Legacy redirect: review-environment login link → codev access page

get

Back-compat 302 for old PR links. Resolves the legacy targetOrg to its review-env assignment and redirects to /review-env/:assignmentId.

Query parameters

actionstringRequired

Legacy action; only 'frontDoorUrl' is supported.

paramsstringRequired

Legacy comma-separated key:value blob, e.g. targetOrg:myorg,repository:org/repo

Responses

302

Redirect to the codev review-env access page.

No content

get/sfp/api/auth/continue

HTTPcURLJavaScriptPython

GET /sfp/api/auth/continue?action=text&params=text HTTP/1.1
Accept: */*

302

Redirect to the codev review-env access page.

No content

Handle authentication callback

post

Validates the provided access token and optional refresh token

Body

application/json

access_tokenstringRequired

The access token for authentication

Example: eyJhbGciOiJIUzI1NilsImtpZCI6IlRbEty...

refresh_tokenstringOptional

Optional refresh token

Responses

200

Authentication successful

application/json

successbooleanRequired

Indicates if the operation was successful

Example: true

dataobjectRequired

The response data from auth service

Example: {"userId":"123"}

401

Unauthorized - No access token provided or invalid token

500

Internal server error

post/sfp/api/auth/callback

HTTPcURLJavaScriptPython

POST /sfp/api/auth/callback HTTP/1.1
Content-Type: application/json
Accept: */*
Content-Length: 80

{
  "access_token": "eyJhbGciOiJIUzI1NilsImtpZCI6IlRbEty...",
  "refresh_token": "text"
}

{
  "success": true,
  "data": {
    "userId": "123"
  }
}