Login with Email + Password

curl -X POST https://api.bio.re/api/v1/auth/login \
  -H 'Content-Type: application/json' \
  -c cookies.txt \
  -d '{
    "email": "[email protected]",
    "password": "SecureP@ss123",
    "captchaToken": "<turnstile_token>"
  }'

type LoginResponse =
  | { accessToken: string; expiresIn: number }
  | { requiresTwoFactor: true; tempToken: string };

async function login(email: string, password: string, captchaToken?: string): Promise<LoginResponse> {
  const res = await fetch('https://api.bio.re/api/v1/auth/login', {
    method: 'POST',
    credentials: 'include', // accept refresh cookie
    headers: { 'Content-Type': 'application/json' },
    body: JSON.stringify({ email, password, captchaToken }),
  });
  const json = await res.json();
  if (!res.ok || !json.success) {
    throw Object.assign(new Error(json?.error?.message ?? 'Login failed'), {
      code: json?.error?.code,
    });
  }
  return json.data;
}

import { useMutation } from '@tanstack/react-query';

export function useLogin() {
  return useMutation({
    mutationFn: async (input: { email: string; password: string; captchaToken?: string }) => {
      const res = await fetch('/api/v1/auth/login', {
        method: 'POST',
        credentials: 'include',
        headers: { 'Content-Type': 'application/json' },
        body: JSON.stringify(input),
      });
      const json = await res.json();
      if (!res.ok || !json.success) {
        throw Object.assign(new Error(json?.error?.message ?? 'Login failed'), {
          code: json?.error?.code,
          i18nKey: json?.error?.i18nKey,
        });
      }
      return json.data as LoginResponse;
    },
    onSuccess: (data) => {
      if ('requiresTwoFactor' in data) {
        router.push(`/auth/2fa?tempToken=${data.tempToken}`);
      } else {
        // Store accessToken in memory; refresh cookie is httpOnly
        router.push('/dashboard');
      }
    },
  });
}