POST Login with Verification Code
/web/user/auth/login
Authenticate the player using a verification code to obtain a JWT and session token. This endpoint completes the account login flow, establishes a secure session, and enables authorized access to user-specific resources.
Request body:
- role_id: Player role identifier.
- zone_id: Server zone identifier.
- vc: Verification code sent to the player via in-game mail, valid 5 mins.
The response includes authentication details:
- code: Status code (0 indicates success).
- data.jwt: JSON Web Token used for subsequent authenticated requests.
- data.token: Session token string.
- data.roleid: Player role ID.
- data.zoneid: Player zone ID.
- data.time: Timestamp of login.
- data.module, name, email, mobile, open_id: Metadata fields (may be empty depending on account).
The response confirms successful login and provides the credentials required for accessing other user endpoints.
{
"code": 0,
"data": {
"email": "",
"jwt": "eyJhbGciOiJI...REDACTED",
"mobile": "",
"module": "",
"name": "",
"open_id": "",
"roleid": 1234567890,
"time": 1774975992,
"token": "MTc3ND...REDACTED",
"zoneid": 1234
},
"msg": "ok"
}