POST /api/auth/sign-in

{
  "email": "user@example.com",
  "password": "securePassword123!",
  "rememberMe": true // Optional: extend session duration
}

{
  "success": true,
  "data": {
    "user": {
      "id": "usr_123456",
      "email": "user@example.com",
      "name": "John Doe",
      "emailVerified": true,
      "image": "https://cdn.example.com/avatars/usr_123456.jpg",
      "organizations": [
        {
          "id": "org_789",
          "name": "Acme Inc",
          "role": "owner"
        }
      ]
    },
    "session": {
      "token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...",
      "expiresAt": "2024-01-22T10:30:00Z",
      "refreshToken": "rt_abc123..." // For token refresh
    }
  },
  "message": "Signed in successfully"
}

{
  "success": false,
  "error": {
    "code": "INVALID_CREDENTIALS",
    "message": "Invalid email or password"
  }
}

{
  "success": false,
  "error": {
    "code": "EMAIL_NOT_VERIFIED",
    "message": "Please verify your email before signing in",
    "resendUrl": "/api/auth/resend-verification"
  }
}

{
  "success": false,
  "error": {
    "code": "ACCOUNT_LOCKED",
    "message": "Account temporarily locked due to too many failed attempts",
    "unlockAt": "2024-01-15T11:30:00Z"
  }
}

{
  "provider": "google",
  "callbackUrl": "/dashboard",
  "organizationId": "org_789" // Optional: for SSO context
}

{
  "success": true,
  "data": {
    "authorizationUrl": "https://accounts.google.com/o/oauth2/v2/auth?..."
  }
}

{
  "email": "user@example.com",
  "callbackUrl": "/dashboard"
}

{
  "success": true,
  "data": {
    "sent": true,
    "expiresIn": 3600
  },
  "message": "Magic link sent to your email"
}

GET /api/auth/sign-in/magic?token=xyz123&callbackUrl=/dashboard

curl -X POST https://api.yourdomain.com/api/auth/sign-in \
  -H "Content-Type: application/json" \
  -d '{
    "email": "user@example.com",
    "password": "securePassword123!",
    "rememberMe": true
  }'

interface SignInCredentials {
  email: string;
  password: string;
  rememberMe?: boolean;
}

interface SignInResponse {
  success: boolean;
  data?: {
    user: User;
    session: Session;
  };
  error?: {
    code: string;
    message: string;
  };
}

async function signIn(credentials: SignInCredentials): Promise<SignInResponse> {
  const response = await fetch('/api/auth/sign-in', {
    method: 'POST',
    headers: { 'Content-Type': 'application/json' },
    body: JSON.stringify(credentials)
  });

  return response.json();
}

// Usage
const result = await signIn({
  email: 'user@example.com',
  password: 'securePassword123!',
  rememberMe: true
});

if (result.success) {
  // Session cookie is automatically set
  window.location.href = '/dashboard';
} else {
  console.error(result.error?.message);
}

import { useState } from 'react';

export function SignInForm() {
  const [email, setEmail] = useState('');
  const [password, setPassword] = useState('');
  const [rememberMe, setRememberMe] = useState(false);
  const [error, setError] = useState('');
  const [isLoading, setIsLoading] = useState(false);

  const handleSubmit = async (e: React.FormEvent) => {
    e.preventDefault();
    setError('');
    setIsLoading(true);

    try {
      const response = await fetch('/api/auth/sign-in', {
        method: 'POST',
        headers: { 'Content-Type': 'application/json' },
        body: JSON.stringify({ email, password, rememberMe })
      });

      const result = await response.json();

      if (!result.success) {
        setError(result.error.message);
        return;
      }

      window.location.href = '/dashboard';
    } catch {
      setError('An unexpected error occurred');
    } finally {
      setIsLoading(false);
    }
  };

  return (
    <form onSubmit={handleSubmit}>
      {error && <div className="error">{error}</div>}
      
      <input
        type="email"
        value={email}
        onChange={(e) => setEmail(e.target.value)}
        placeholder="Email"
        required
      />
      
      <input
        type="password"
        value={password}
        onChange={(e) => setPassword(e.target.value)}
        placeholder="Password"
        required
      />
      
      <label>
        <input
          type="checkbox"
          checked={rememberMe}
          onChange={(e) => setRememberMe(e.target.checked)}
        />
        Remember me
      </label>
      
      <button type="submit" disabled={isLoading}>
        {isLoading ? 'Signing in...' : 'Sign In'}
      </button>
    </form>
  );
}