Auth

Session-based authentication (login, setup, TOTP)

Endpoints

• GET Check setup status — /api/auth/status
• POST Initial user setup — /api/auth/setup
• POST Login with credentials — /api/auth/login
• POST Set up TOTP for a new user — /api/auth/setup-totp
• POST Verify TOTP code — /api/auth/verify-totp
• GET Validate invite token — /api/auth/invite/{token}
• POST Accept invite and set password — /api/auth/accept-invite
• POST Verify TOTP during invite setup — /api/auth/verify-invite-totp
• POST Logout — /api/auth/logout
• GET Get current user — /api/auth/me