Authentifizierung API

Admin Login

POST /api/auth/admin/login

Body:

{
  "username": "admin",
  "password": "dein_passwort"
}

Erfolg (200):

{
  "success": true,
  "token": "eyJhbGciOiJIUzI1NiIs...",
  "user": {
    "username": "admin",
    "role": "admin"
  }
}

Fehler (401):

{
  "error": "Invalid credentials"
}

User Login

POST /api/auth/user/login

Body:

{
  "displayName": "PlayerName"
}

Erfolg (200):

{
  "success": true,
  "token": "eyJhbGciOiJIUzI1NiIs...",
  "user": {
    "username": "PlayerName",
    "role": "user",
    "discordId": "123456789012345678"
  }
}

Discord OAuth starten

GET /api/auth/discord

Response (302): Redirect zur Discord OAuth URL.

Query-Parameter der Redirect-URL:

• client_id - Discord Application ID
• redirect_uri - Callback URL
• response_type - code
• scope - identify
• state - CSRF-Schutz Token

Discord OAuth Callback

GET /api/auth/discord/callback?code=...&state=...

Erfolg (200):

{
  "success": true,
  "token": "eyJhbGciOiJIUzI1NiIs...",
  "user": {
    "username": "PlayerName",
    "role": "user",
    "discordId": "123456789012345678",
    "avatar": "https://cdn.discordapp.com/avatars/..."
  }
}

Aktueller User

GET /api/auth/user
Authorization: Bearer <token>

Erfolg (200):

{
  "success": true,
  "user": {
    "username": "PlayerName",
    "role": "user",
    "discordId": "123456789012345678"
  }
}

Logout

POST /api/auth/logout
Authorization: Bearer <token>

Erfolg (200):

{
  "success": true
}