Complete Login

POST/web/v1/users/self/auth/login/complete None

Completes the login flow by verifying the MFA code or credentials and issuing JWT tokens. Returns access and refresh tokens on success.

Required Headers

Header	Example Value	Description
Content-Type	application/json	Request content type
Accept	application/json	Expected response type
X-Client-Hash		Client device fingerprint
Accept-Language	en, zh, zh-Hant, ja, vi	Response language (default: en)
Authorization	Bearer	JWT access token

Request Parameters

Name	Type	Required	In	Description
request	Object	Required	body	LoginCompleteRequest object (see request body schema)

Success Response

Success 200

{
  "version": "1.3.0",
  "timestamp": 1709337600000,
  "success": true,
  "code": "2000",
  "message": "SUCCESS",
  "data": {
    "accessToken": "<token>",
    "refreshToken": "<token>",
    "expiresIn": 3600,
    "tokenType": "Bearer"
  }
}

Error Responses

Unauthorized 401

{
  "success": false,
  "code": "4010",
  "message": "Invalid or expired token"
}

Notes

• If the account is pending approval, the response will include isPendingApproval: true with result code ACCOUNT_PENDING_APPROVAL.
• Rate limited to 5 requests per window.
• Request body is strictly validated — unknown or unexpected fields will be rejected with HTTP 400.