Use Cases Password Sign In

Password Sign-In

Authenticate an existing user with email and password.

Actors

• End user
• Client application
• Tikti API

Preconditions

• User exists with active status.
• Password hash is present for the identity.

Main flow

1. User submits email and password in the client app.
2. Client calls POST /v1/accounts/signInWithPassword?key=API_KEY.
3. Tikti validates credentials and account status.
4. Tikti returns idToken and standard auth payload.
5. Client may call POST /v1/accounts/lookup?key=API_KEY to resolve identity metadata.

Sequence diagram

sequenceDiagram
    participant U as End User
    participant F as Client App
    participant T as Tikti API

    U->>F: Enter email/password and submit
    F->>T: POST /v1/accounts/signInWithPassword?key=API_KEY
    T->>T: Validate credentials and account status
    T-->>F: idToken + auth payload
    opt Resolve profile metadata
        F->>T: POST /v1/accounts/lookup?key=API_KEY
        T-->>F: Identity metadata
    end
    F-->>U: Authenticated session

Loading

Expected outcomes

• Correct credentials produce a valid auth payload.
• Invalid credentials are rejected with stable error semantics.
• Suspended or inactive users cannot authenticate.

Failure scenarios

• Wrong password -> authentication denied.
• Unknown email -> authentication denied.
• Suspended user -> authentication denied even with correct password.

Related specs

• API Specification
• Operations and SLO