Manager Login

Manager user login to obtain access token

POST /manager/login

cURL

curl -X POST "http://localhost:5001/manager/login" \
  -H "Content-Type: application/json" \
  -d '{
    "username": "admin",
    "password": "your_password"
  }'

Success Response

{
  "token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...",
  "expire": 3600,
  "user": {
    "username": "admin",
    "role": "administrator",
    "permissions": ["read", "write", "admin"]
  }
}

Overview

Manager user login interface for obtaining access tokens for the management backend.

Request Body

Required Parameters

username · string · required

Manager username

password · string · required

Manager password

cURL

curl -X POST "http://localhost:5001/manager/login" \
  -H "Content-Type: application/json" \
  -d '{
    "username": "admin",
    "password": "your_password"
  }'

Success Response

{
  "token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...",
  "expire": 3600,
  "user": {
    "username": "admin",
    "role": "administrator",
    "permissions": ["read", "write", "admin"]
  }
}

Response Fields

token · string · required

Access token for authentication in subsequent API calls

expire · integer · required

Token expiration time (seconds)

user · object · required

User information

Show user fields

user.username · string

Username

user.role · string

User role

user.permissions · array

User permissions list

Status Codes

Status Code	Description
200	Login successful
401	Invalid username or password
429	Too many login attempts
500	Internal server error

Best Practices

1. Password Security: Use strong password policies, change passwords regularly
2. Token Management: Implement automatic token refresh mechanism
3. Access Control: Role-based and permission-based access control
4. Login Restrictions: Implement login attempt limits
5. Session Management: Set reasonable token expiration times
6. Secure Storage: Don’t store sensitive information in insecure places