Endpoints for obtaining access tokens.

Login (Get Access Token)

Exchange your credentials for a JWT access token.

Endpoint: POST /v1/login/access-token

Request

This endpoint expects multipart/form-data or application/x-www-form-urlencoded.

Parameters:

Example Request

curl -X 'POST' \
  'https://api.fav3.velamobile.com/v1/login/access-token' \
  -H 'Content-Type: application/x-www-form-urlencoded' \
  -d 'username=admin%40example.com&password=yourpassword'

Response

Success (200 OK):

{
  "access_token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...",
  "token_type": "bearer"
}

Session Details:

• Access Token Expiry: 24 hours (configurable)
• Session Tracking: Server-side session validation enabled

Error Responses

400 Bad Request - Incorrect credentials:

{
  "detail": "Incorrect email or password"
}

429 Too Many Requests - Rate limit exceeded:

{
  "detail": "Too many requests"
}

Token Expiry

If the access token expires or is invalid, the API returns 403 Forbidden.

Response:

{
  "detail": "Could not validate credentials"
}

Action: The client must re-authenticate by calling /v1/login/access-token again.