Auth test harness — OAuth popups auto-detect stored tokens
OAuth Client IDs
Configure once
Important: For browser Sign in with Apple (popup), this URL and the initiating domain (e.g. localhost) must be registered in your Apple Developer Account under Certificates, Identifiers & Profiles > Identifiers > Services IDs > com.growtogetherorg.daybloom.
1. Signup
POST /api/v1/auth/signup
2. Login
POST /api/v1/auth/login
2.5 Email Verification
POST /api/v1/auth/verify-email
Verify Email
Resend Verification Email
Tokens
Not stored
—
—
3. Profile
GET /api/v1/users/me
4. Google OAuth
POST /api/v1/auth/google
5. Apple Sign In
POST /api/v1/auth/apple
6. Refresh Token
POST /api/v1/auth/refresh
7. Forgot Password
POST /api/v1/auth/forgot-password
8. Reset Password
POST /api/v1/auth/reset-password
9. Logout
POST /api/v1/auth/logout
10. Google Calendar Sync
/api/v1/calendar/integrations/google
Requires a stored access token (log in above first) and CALENDAR_SYNC_ENABLED=true.
Connect redirects this page to Google consent and finishes automatically on return —
GOOGLE_CALENDAR_REDIRECT_URI must point at this page and be registered on the calendar OAuth client.