Content Management API > Session

1
POST https://site-api.datocms.com/sessions HTTP/1.1
2
Authorization: Bearer YOUR-API-TOKEN
3
Accept: application/json
4
X-Api-Version: 3
5
Content-Type: application/vnd.api+json
6

7
{
8
  "data": {
9
    "type": "email_credentials",
10
    "attributes": {
11
      "email": "foo@bar.com",
12
      "password": "changeme"
13
    }
14
  }
15
}

1
await fetch("https://site-api.datocms.com/sessions", {
2
  method: "POST",
3
  headers: {
4
    Authorization: "Bearer YOUR-API-TOKEN",
5
    Accept: "application/json",
6
    "X-Api-Version": "3",
7
    "Content-Type": "application/vnd.api+json",
8
  },
9
  body: JSON.stringify({
10
    data: {
11
      type: "email_credentials",
12
      attributes: { email: "foo@bar.com", password: "changeme" },
13
    },
14
  }),
15
});

1
HTTP/1.1 200 OK
2
Content-Type: application/json
3
Cache-Control: cache-control: max-age=0, private, must-revalidate
4
X-RateLimit-Limit: 30
5
X-RateLimit-Remaining: 28
6

7
{
8
  "data": {
9
    "type": "session",
10
    "id": "eyJCJhbGci.eyJhaWwuY29tIn0.32wQOMci",
11
    "relationships": {
12
      "user": {
13
        "data": {
14
          "type": "user",
15
          "id": "312"
16
        }
17
      }
18
    }
19
  },
20
  "included": [
21
    {
22
      "type": "user",
23
      "id": "312",
24
      "relationships": {
25
        "role": {
26
          "data": {
27
            "type": "role",
28
            "id": "34"
29
          }
30
        }
31
      },
32
      "attributes": {
33
        "email": "mark.smith@example.com",
34
        "is_2fa_active": true,
35
        "full_name": "Mark Smith",
36
        "is_active": true
37
      }
38
    }
39
  ]
40
}