Authenticate a user

This function returns a JWT token that you can use as a cookie ID. This token will let you identify which user the JWT token belongs to.

Security note: If you are building a public facing web application, you should avoid storing the JWT in localStorage or session storage. Users with third-party extensions installed in web browsers can read your user's browser information, and will be able to access the localStorage which thereby compromises user data.

Instead, you should store the value of the JWT in your web application's cookie header as an httpOnly cookie, where it is not accessible by the browser's third-party plugins.

Query

mutation Login($input: LoginInput!) {
  tenant {
    login(input: $input)
  }
}

Variables

{
  "input": {
    "username": "[e-mail]",
    "password": "password"
  }
}

Response

{
  "data": {
    "tenant": {
      "login": "eyJhbGciOiJIUzUxMiIsInR5cCI6IkpXVCJ9....."
    }
  }
}