Auth Endpoints

The Auth domain covers pre-auth user flows (registration, email verification, password reset) and authenticated account management (profile, password change, API token). All endpoints are mounted under the /wallethero-api prefix.

Registration, verification, and password-reset endpoints are public (no token). Profile, password, and API-token endpoints require a Bearer token for the authenticated user (no workspace membership needed).

For native session login / refresh / logout, see Authentication — those run on Directus's built-in /auth/* endpoints, not under /wallethero-api.

Endpoints

Method	Endpoint	Auth	Description	Reference
POST	/wallethero-api/register	Public	Register a new user	Register
POST	/wallethero-api/verify-email	Public	Verify email address	Verify Email
POST	/wallethero-api/resend-verification	Public	Resend verification email	Verify Email
POST	/wallethero-api/password-reset-request	Public	Request password reset	Password Reset
POST	/wallethero-api/password-reset-confirm	Public	Confirm password reset	Password Reset
PATCH	/wallethero-api/user/profile	Bearer	Update user profile	User Profile
PATCH	/wallethero-api/user/password	Bearer	Change password	User Profile
GET	/wallethero-api/user/api-token	Bearer	Check API token status	API Token
POST	/wallethero-api/user/api-token/regenerate	Bearer	Regenerate API token	API Token
DELETE	/wallethero-api/user/api-token	Bearer	Revoke API token	API Token

Registration Flow

1. User registers with email/password via POST /wallethero-api/register.
2. The system sends a verification email containing a token.
3. The user clicks the link, and the frontend calls POST /wallethero-api/verify-email with that token.
4. After verification the user is granted the workspace admin role and can sign in.

Registering with an invitation_token skips steps 2–3: the user is auto-verified and added to the inviting workspace.