# Auth

 - [Authentication & Authorization](https://docs.pers.ninja/swagger/auth/authentication-and-authorization.md): ## Authentication & Authorization <div style="font-size: 14px; line-height: 1.5;"> Comprehensive authentication and authorization system supporting multiple access levels including users, businesses,
 - [POST /auth/token](https://docs.pers.ninja/swagger/auth/authcontroller_createtoken.md): Universal token creation with consistent token-in-body pattern. ## Authentication Flows ### USER AUTHENTICATION - **Header**: `x-project-key` (tenant identification) - **Body**: `{ authToken: "jwt_fro
 - [POST /auth/refresh](https://docs.pers.ninja/swagger/auth/authcontroller_refresh.md): Refresh access tokens using valid refresh token
 - [POST /auth/verify](https://docs.pers.ninja/swagger/auth/authcontroller_verifytoken.md): Verify JWT tokens with automatic issuer detection: - Decodes JWT to extract issuer claim - PERS tokens: Verified internally - External tokens: Future support planned
 - [POST /auth/magic-link/send](https://docs.pers.ninja/swagger/auth/authcontroller_sendmagiclink.md): Send a magic link email for passwordless authentication. Rate limited to 3 requests per email per 10 minutes.