Check Credentials

Verify user credentials without creating a session. Useful for validating credentials from external systems.

Endpoint: POST /check-credentials

Headers:

• Authorization: Bearer <admin_api_key> (required)
• Content-Type: application/json

Request Body (Username/Password user):

{
  "credentials": {
    "username": "john_doe",
    "password": "user_password"
  }
}

Request Body (License Code user):

{
  "credentials": {
    "code": "ABC123-XYZ789"
  }
}

Response (Valid credentials):

{
  "valid": true,
  "user_id": "550e8400-e29b-41d4-a716-446655440000",
  "membership": {
    "active_until": "2025-12-31T23:59:59Z",
    "is_lifetime": false,
    "is_active": true
  }
}

Response (Invalid credentials):

{
  "valid": false,
  "user_id": null,
  "membership": null
}

Errors:

• 401 - Invalid Admin API Key