# Autenticacao

O GitOps usa JWT (JSON Web Tokens) com cookies HttpOnly para autenticacao do frontend.

# Login

POST /auth/login
Content-Type: application/json

Body:

{
  "email": "admin@example.com",
  "password": "senha123"
}

Resposta (200):

{
  "token": "eyJ...",
  "user": {
    "id": 1,
    "email": "admin@example.com",
    "name": "Admin"
  }
}

Tambem define cookies HttpOnly:

• access_token (24h)
• refresh_token (7d)

# Refresh Token

POST /auth/refresh
Cookie: refresh_token=eyJ...

Resposta (200):

{
  "token": "eyJ..."
}

# Verificar Token

GET /auth/check
Cookie: access_token=eyJ...

Resposta (200):

{
  "valid": true,
  "user": {
    "id": 1,
    "email": "admin@example.com"
  }
}

# Perfil

GET /auth/profile
Cookie: access_token=eyJ...

# Logout

POST /auth/logout

Limpa os cookies de autenticacao.

# API Key

Para integracao via API (MCP, scripts), use o header X-API-Key:

X-API-Key: 7689ac80c3928a03...

A API Key e definida na variavel de ambiente API_KEY.