SebAuth — Authentication

Store and authenticate your application's end users. Accounts are scoped to the project that the API key belongs to.

Create a user

bash

curl -X POST https://seb-auth.lovable.app/api/public/v1/auth/signup \
  -H "Authorization: Bearer sk_live_your_key" \
  -H "Content-Type: application/json" \
  -d '{"email":"ada@example.com","password":"s3cret-pass","name":"Ada Lovelace"}'

Sign a user in

bash

curl -X POST https://seb-auth.lovable.app/api/public/v1/auth/login \
  -H "Authorization: Bearer sk_live_your_key" \
  -H "Content-Type: application/json" \
  -d '{"email":"ada@example.com","password":"s3cret-pass"}'

A successful login returns the user object and updates last_login_at. Invalid credentials return 401.

List users

bash

curl https://seb-auth.lovable.app/api/public/v1/auth/users \
  -H "Authorization: Bearer sk_live_your_key"

Passwords

Passwords are hashed with SHA-256 plus a per-key pepper before storage and are never returned by the API.