Login user by username and password.

POST

/v1/login

Request

Query Params

Body Params application/json

Examples

Responses

🟢200OK

text/plain

Returns the token and refresh token.

Body

🟠400Bad Request

🟠401Unauthorized

🟠403Forbidden

🔴500Server Error

Request Example

Shell

JavaScript

Java

Swift

curl --location --request POST 'https://api.dev.ordermesh.io/v1/login?source' \
--header 'Content-Type: application/json' \
--data-raw '{
    "password": "pass123@",
    "username": "george_2002"
}'

Response Example

200 - Success Example

{
    "accessToken": "eyJhbGciOiJSUzI1NiIsInR5cCIg...",
    "scope": "email profile",
    "tokenType": "Bearer",
    "refreshToken": "eyJhbGciOiJIUzI1NiIsInR5cCIgOiAiSldUI...",
    "expiresIn": 900,
    "identityToken": null,
    "id": "c8f51b34-3c03-417c-b3ff-1e49a159e851",
    "shortId": "U02270001",
    "username": "",
    "email": "joe.bloggs@domain.com",
    "firstName": "Joe",
    "lastName": "Bloggs",
    "status": "enabled",
    "dateCreated": "2026-03-09T23:57:50.0514035Z",
    "attributes": {
        "merchantIds": [
            "merchant-1",
            "merchant-2"
        ],
        "vendorIds": [
            "vendor-1"
        ],
        "facilityIds": [
            "facility-1"
        ]
    },
    "roles": [
        {
            "id": "03d5cd96-6d1e-46de-94c3-ceeb57feeadb",
            "name": "merchant",
            "usersCount": null,
            "permissionSet": [
                {
                    "resourceId": "33c7a0f0-0036-4461-b677-97520b874824",
                    "resourceName": "order",
                    "resourceDisplayName": "Order",
                    "availablePermissions": [
                        {
                            "name": "get",
                            "description": ""
                        },
                        {
                            "name": "create",
                            "description": ""
                        }
                    ],
                    "associatedPermissions": [
                        {
                            "name": "get",
                            "description": ""
                        }
                    ]
                }
            ]
        }
    ]
}

Modified at 2026-03-10 00:03:31

Generate service client access token (valid for 24 hours).