Sign in
Exchange an email and password for an access and refresh token pair.
Requires the X-Brand-Slug: hi-doctor header. Sign-in itself needs no bearer token.
An account created through Google sign-in has no password and is refused with code: "google_account" — offer Continue with Google rather than an invalid-credentials message, which reads to the patient as though their account is gone.
Authorizations
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
Headers
Identifies the Hi-Doctor brand. Required; the request is rejected without it.
hi-doctor Body
Response
Token pair returned by sign-in, with the role flags the web app uses for routing. All three are false on a patient account and none of them grants access to anything in this reference.