인증

로그인·로그아웃, 토큰 갱신과 서비스 토큰을 관리하는 API입니다.

📄️ Log In

Log in with email and password to issue an access token.

📄️ Log Out

Log out and clear the refresh token cookie.

📄️ Refresh Access Token

Issue a new access token using the refresh token.

📄️ Get Current User

Return the currently authenticated user.

📄️ Update Me

Update the current user's display_name and/or avatar_config.

📄️ Upload Avatar

Upload an avatar image for the current user.

📄️ Delete Avatar

Delete the current user's uploaded avatar image.

📄️ Get Avatar

Serve an avatar image with HMAC signature verification. Browsers cannot attach Authorization headers to <img src>; this endpoint authenticates via short-lived signed URLs returned from /auth/me instead.

📄️ Get Personal Prompt

Return the caller's personal prompt. Unset is a normal state, not a 404 — the editor and the per-request runtime both read this, and turning "not configured" into an error would make every turn of an unconfigured conversation log a failure.

📄️ Set Personal Prompt

Replace the caller's personal prompt.

📄️ Delete Personal Prompt

Clear the caller's personal prompt. Idempotent.

📄️ Change Password

Change the current user's password.