Error
Hosted auth
Sign in a contact
Hosted mode only. One uniform 401 for unknown email, password-less contact and wrong password alike, with a dummy bcrypt compare keeping the timing uniform too. Proving the password proves the account, so the session is verified.
Rate limited to 20 requests per 5 minutes per IP.
POST
Error