apps / auth
au

toa://auth

200 OK

Headless user management & RBAC.

OVERVIEW

auth is the single front door for the ecosystem. One account, JWT sessions, RBAC, and registration — consumed by every app over a small, boring, well-documented API.

FEATURES
One account
Single identity across every toa:// app.
JWT sessions
Short-lived access tokens, rotating refresh.
RBAC
Roles and scopes enforced at the API edge.
Self-hosted
Your users, your database, your server.
API
tor@toa: ~ /auth --routes
POST /api/login
POST /api/register
POST /api/refresh
GET /api/me