Skip to main content
POST
Sign in

Authorizations

Authorization
string
header
required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Headers

X-Brand-Slug
enum<string>
default:hi-doctor
required

Identifies the Hi-Doctor brand. Required; the request is rejected without it.

Available options:
hi-doctor

Body

application/json

Email and password sign-in, returning an access and refresh token pair.

Requires the X-Brand-Slug: hi-doctor header. An account created through Google sign-in has no password and is refused with code: "google_account".

email
string
required
write-only
password
string
required
write-only

Response

Token pair returned by sign-in, with the role flags the web app uses for routing. All three are false on a patient account and none of them grants access to anything in this reference.

refresh
string
required

Refresh token.

access
string
required

Access token — send as Authorization: Bearer.

is_doctor
boolean
is_backoffice_admin
boolean
is_marketer
boolean