GrivaOneAPI

Identity & Auth

auth.grivaone.com

Login, tokens, password recovery, OTP/2FA and session management. The only fully public surface of the API.

20 endpoints3 moduleshttps://gulfpay-production.up.railway.app/api/v1
20 endpoints across 3 modules

Trial signup, login, token refresh, logout, password recovery and the current-user profile.

POSTPublic
/api/v1/auth/trial-signup

Trial signup

Body: TrialSignupDto

POSTPublic
/api/v1/auth/login

Login

Body: LoginDto

POSTPublic
/api/v1/auth/forgot-password

Forgot password

Body: ForgotPasswordDto

POSTPublic
/api/v1/auth/reset-password

Accepts EITHER { token, newPassword } (V135 signed single-use link) OR the legacy { email, otp, newPassword }

Body: ResetPasswordDto

POSTPublic
/api/v1/auth/refresh

Exchange a refresh token for a new access token

Body: JSON

POSTPublic
/api/v1/auth/logout

Log out and revoke the refresh token

Body: JSON

GETJWT
/api/v1/auth/me

Get the current authenticated user and memberships

POSTJWT
/api/v1/auth/onboarding-tour-seen

Mark the one-time onboarding tour as seen

POSTJWT
/api/v1/auth/change-password

Change the current user’s password

Body: ChangePasswordDto