OAuth

OAuth authentication and session management

📄️ Development mode login

Quick login for local development without real OAuth credentials.

Handles OAuth provider callback after user authorization.

Redirects user to OAuth provider's authorization page.

Invalidates the current session's refresh token

Revokes all refresh tokens for the current user.

Returns the currently authenticated user's profile

Returns list of configured and enabled OAuth providers

Uses refresh token cookie to obtain new access token

Returns the currently authenticated user's profile with linked account info

Updates user profile fields. Sets profileCustomized=true

Removes the user's avatar image and resets to default

Uploads a new avatar image for the user. Accepts JPEG, PNG, GIF, and WebP.

Permanently closes the user's account. All sessions are invalidated

Initiates an email change request. Requires the user's current password

Completes an email change request by verifying the token.

Returns all OAuth providers linked to the current user's account

Removes an OAuth identity from the user's account.

Updates the user's first name and last name.

Sets or changes the user's password.

Returns whether the user has a password set

Returns a short-lived token (30 seconds) for WebSocket authentication.