Login with an nsec (private key)

POST

/api/v1/auth/nostr/nsec

For users without a browser signer. The key signs a login event server-side and is never stored or logged. Auto-provisions new keys.

Header Parameters

Example Request

curl -X POST 'http://localhost:3001/api/v1/auth/nostr/nsec'

Example Request

curl -X POST 'http://localhost:3001/api/v1/auth/nostr/nsec'

Example Response201

Empty

Verify a signed kind 27235 login event. Resolves the account from linked identities/wallet/addresses, or auto-provisions a new nostr-first user.

Refresh access token POST

Get a new access token using a valid refresh token. Rate limited to 20 requests per minute.