Authentication

---
title: "Authentication"
description: "All API requests require a Bearer token in the Authorization header"
---

## API Key Authentication

All Elumenta API requests must include your API key as a Bearer token:

```http
Authorization: Bearer nb_YOUR_API_KEY

POST /api/v2/auth/telegram
Content-Type: application/json

{
  "id": 123456789,
  "first_name": "Ivan",
  "username": "ivan_dev",
  "auth_date": 1709900000,
  "hash": "abc123..."
}

{
  "access_token": "eyJhbGciOiJIUzI1NiJ9...",
  "token_type": "bearer",
  "expires_in": 900,
  "user": {
    "id": 42,
    "name": "Ivan",
    "plan": "vip",
    "token_balance": 1500
  }
}

POST /api/v2/auth/login
Content-Type: application/json

{
  "email": "ivan@example.com",
  "password": "your_password"
}

POST /api/v2/auth/login-phone
Content-Type: application/json

{
  "phone": "+79991234567",
  "password": "your_password"
}

POST /api/v2/auth/google
Content-Type: application/json

{
  "code": "4/0AX4XfWh...",
  "redirect_uri": "https://yourapp.com/auth/google/callback"
}

POST /api/v2/auth/refresh

{
  "access_token": "eyJhbGciOiJIUzI1NiJ9...",
  "expires_in": 900
}