Authentication

https://beta-api.conformly.ai/api/v1

http://localhost:8000/api/v1

Authorization: Bearer <supabase_jwt_token>

curl -X GET "http://localhost:8000/api/v1/auth/me" \
  -H "Authorization: Bearer YOUR_JWT_TOKEN"

{
  "id": "f2427d3d-96c6-41a3-8a5d-9e0bd3fe4031",
  "email": "user@example.com",
  "name": "John Doe",
  "organization": "Acme Corp",
  "role": "engineer",
  "created_at": "2026-01-15T10:30:00Z",
  "last_login": "2026-03-03T14:00:00Z",
  "subscription_status": "active",
  "subscription_plan": "free"
}

curl -X POST "http://localhost:8000/api/v1/auth/sync" \
  -H "Authorization: Bearer YOUR_JWT_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"id": "user-uuid", "email": "user@example.com", "name": "John Doe"}'

{
  "success": true,
  "message": "Profile synced successfully",
  "user_id": "f2427d3d-96c6-41a3-8a5d-9e0bd3fe4031",
  "email": "user@example.com",
  "subscription_migrated": false,
  "subscription_plan": "free"
}

curl -X POST "http://localhost:8000/api/v1/auth/refresh" \
  -H "Authorization: Bearer YOUR_JWT_TOKEN"

{
  "access_token": "new_jwt_token",
  "token_type": "bearer",
  "expires_in": 3600
}

{
  "error": {
    "code": "AUTHENTICATION_ERROR",
    "message": "Could not validate credentials",
    "details": {"reason": "Invalid token or token expired"},
    "timestamp": "2026-01-15T10:30:00Z",
    "request_id": "req_123456789"
  }
}

{
  "detail": "Active subscription required"
}

// 1. On page load, checkSession() runs:
//    - Calls POST /auth/sync (activates free plan if needed)
//    - Calls GET /auth/me (reads subscription_status)
//    - Sets authState to "authenticated" or "no-subscription"

// 2. On explicit sign-in (SIGNED_IN event):
//    - Defers sync + check via setTimeout to avoid Supabase deadlock
//    - Same flow as above

// 3. On sign-out:
//    - Clears session and redirects to /login