Admin Login
POST
/admin/loginOpen in the API playground →
Info
The login endpoint authenticates admin users and processors, returning JWT tokens for session-based access.
Endpoint
POST /api/v1/admin/login
Request Body
emailstringbodyrequired
User email address
passwordstringbodyrequired
User password
User Types
Admin Users
Dashboard users with roles like system_admin, compliance_user, super_agent
Processors
Merchant accounts for POS terminal management
Example
curl -X POST "https://demo.api.vultlocal.com/api/v1/admin/login" \
-H "Content-Type: application/json" \
-d '{
"email": "admin@smartpay.sl",
"password": "SecureP@ss123"
}'
Token Management
Login
Receive access token (15 min) and refresh token (7 days)
Use Token
Include in Authorization: Bearer <token> header
Refresh
When expired, use refresh endpoint to get new tokens
Logout
Revoke refresh token when logging out
User Roles
| Role | Access Level |
|---|---|
system_admin | Full system access |
compliance_user | Compliance monitoring |
support_user | Customer support |
sales_user | Sales operations |
audit_user | Read-only audit access |
super_agent | Agent network management |
sub_agent | Field agent operations |
processor | POS merchant dashboard |
Errors
| Code | Error | Description |
|---|---|---|
| 400 | INVALID_REQUEST | Missing email or password |
| 401 | INVALID_CREDENTIALS | Wrong email or password |
| 401 | ACCOUNT_INACTIVE | User account is not active |
| 500 | INTERNAL_ERROR | Server error |
Security Notes
Warning
- Login attempts are logged for audit
- Failed attempts may trigger account lockout
- Access tokens expire after 15 minutes
- Always use HTTPS in production