Authentication

Authorization: Bearer <your-jwt-token>

POST /auth/login
Content-Type: application/json

{
  "email": "user@example.com",
  "password": "your-password",
  "otp": "123456"
}

{
  "status": "success",
  "data": {
    "access_token": "eyJhbGciOiJIUzI1NiIs...",
    "refresh_token": "eyJhbGciOiJIUzI1NiIs...",
    "expires_in": 3600
  }
}

POST /auth/refresh
Content-Type: application/json

{
  "refresh_token": "eyJhbGciOiJIUzI1NiIs..."
}