Auth - ON RAMP by Mesadepagos

The Auth module authenticates partner users and returns the JWT required to access protected endpoints.

POST /v3/auth/login

This endpoint uses the same credentials and returns a JWT and user data in the same format as POST /v2/auth/login. No prior token is required.

Request

{
  "email": "partner@example.com",
  "password": "secret123"
}

Response

{
  "success": true,
  "accessToken": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...",
  "user": {
    "id": "550e8400-e29b-41d4-a716-446655440000",
    "name": "Partner User",
    "email": "partner@example.com",
    "role": "tenant",
    "status": "ACTIVE",
    "completedOnboardingSteps": ["business_info", "bank_details"]
  },
  "message": "Login successful"
}

Using the Token

Include the token in every protected request:

Authorization: Bearer {accessToken}

Common Errors

Code	Cause
`400`	The email or password has an invalid format.
`401`	Invalid credentials, or an expired token on protected endpoints.