Start a browser sign-in
GET/v1/auth/loginPúblico
Reached by navigation, not by fetch. Stores a one-time sign-in transaction (state, nonce, PKCE verifier), sets a short-lived roundr_login cookie bound to it, and redirects to the Cognito Hosted UI, which returns to /v1/auth/callback on the same host.
return_to is a path on the page's own origin to land on afterwards. Anything that is not a plain absolute path (protocol-relative, a backslash, whitespace, an API path) is replaced by /, so a bad link still signs the user in.
intent=signup opens the Hosted UI on its sign-up page instead of its sign-in page, with the same transaction and the same callback: anyone may create an account, which belongs to no organization until one admits it or the person creates one (POST /v1/organizations). Any other value is a sign-in.
Not available on hosts that serve no sign-in, or where Cognito is not configured.
Parámetros
return_toconsulta · stringintentconsulta · stringproviderconsulta · stringA federated provider's name on the user pool, from
/v1/auth/options, which sends the browser straight to that provider rather than to the Hosted UI's own page. Any other value opens the Hosted UI.
Respuestas
302To the Cognito Hosted UI. Setsroundr_login.404Sign-in is not available on this host.429Too many sign-ins started from this IP, or, for a caller already signed in, its
curl 'https://api.roundr.com/v1/auth/login'