# Auth API

## Pages

- [Auth API](https://truememory-docs.mvstg.com/auth/index.md) — Sign-in, tokens, email verification and account management. For chat and memory, see the [AI Gateway API](/api/).
- [Unlink the Auth0 account from the current Firebase user](https://truememory-docs.mvstg.com/auth/delete-link-mv-account/index.md) — Remove the linked account record for the authenticated Firebase user.

Authenticates via the standard ``Authorization: Bearer <firebase_id_token>`` header.
Returns 404 if no linked account exists, mirroring the GET rather than
reporting success for a link that was never there.

Unlinking stops the association going forward. It does not delete the
memories that were shared while the link existed.
- [Request password reset email](https://truememory-docs.mvstg.com/auth/forgot-password/index.md) — Send a password reset email via Resend (custom template).

Firebase remains the identity backend (it mints the oobCode embedded in the
link), but the email itself is delivered by Resend — never Firebase's
built-in mailer. Always returns ``{"status": "ok"}`` regardless of whether
the email exists to prevent email enumeration attacks.
- [Get the linked Auth0 account for the current Firebase user](https://truememory-docs.mvstg.com/auth/link-mv-account/index.md) — Return the linked account record for the authenticated Firebase user.

Authenticates via the standard ``Authorization: Bearer <firebase_id_token>`` header.
Returns 404 if no linked account exists for this user.
- [Login with email/password](https://truememory-docs.mvstg.com/auth/login/index.md) — Verify email/password credentials and return tokens.
- [Update your profile](https://truememory-docs.mvstg.com/auth/patch-me/index.md) — Update your own profile. Omitted fields are left as they are, and
metadata is shallow-merged rather than replaced. Returns the updated
user.
- [Link a Firebase account to an Auth0 account](https://truememory-docs.mvstg.com/auth/post-link-mv-account/index.md) — Validate both tokens and create a linked account record.

Accepts a Firebase ID token and an Auth0 JWT. Both are validated before
any record is written. Returns 409 if either account is already linked.
- [Refresh tokens](https://truememory-docs.mvstg.com/auth/refresh/index.md) — Exchange a refresh token for a new ID token.
- [Register with email/password](https://truememory-docs.mvstg.com/auth/register/index.md) — Register a new user and return tokens.

When ``tenant_id`` is provided the user is scoped to that tenant and can
only authenticate within it.  When omitted the user is created as a
*platform-wide* user who can access any tenant/app.
- [Confirm password reset](https://truememory-docs.mvstg.com/auth/reset-password/index.md) — Confirm a password reset using the OOB code from the reset email.

The caller receives the OOB code via the deep-link URL in the reset email
sent by ``POST /forgot-password``.  This endpoint exchanges that code plus
a new password for a completed Firebase password reset.
- [Send a customised email-verification email via Resend](https://truememory-docs.mvstg.com/auth/send-verification/index.md) — Send a customised email-verification email via Resend.

No authentication required — mirrors the forgot-password pattern (identifies
the user by email). Always returns ``{"status": "ok"}`` regardless of whether
the email is registered, to prevent email enumeration.
- [Confirm email verification](https://truememory-docs.mvstg.com/auth/verify-email/index.md) — Confirm an email verification using the OOB code from the verification email.

The caller receives the OOB code via the deep-link URL in the verification
email sent by ``POST /send-verification`` (custom Resend template). This is
the server-side equivalent of the Firebase client SDK's ``applyActionCode`` —
clients no longer talk to Firebase directly.

## Sections

- [Email](https://truememory-docs.mvstg.com/auth/email/llms.txt)
- [Get your profile](https://truememory-docs.mvstg.com/auth/me/llms.txt)
- [Oauth](https://truememory-docs.mvstg.com/auth/oauth/llms.txt)
- [Tags](https://truememory-docs.mvstg.com/auth/tags/llms.txt)
- [Change your username](https://truememory-docs.mvstg.com/auth/username/llms.txt)
- [Well Known](https://truememory-docs.mvstg.com/auth/well-known/llms.txt)