Mobile Authentication Flow

POST /auth/signin
{
  "phoneNumber": "+1234567890"
}

POST /auth/otp/create
Authorization: Bearer ACCESS_TOKEN

POST /auth/otp/validate
Authorization: Bearer ACCESS_TOKEN
{
  "otp": "123456"
}

POST /auth/signout
Authorization: Bearer SESSION_TOKEN

import AsyncStorage from '@react-native-async-storage/async-storage';

// 1. Sign in
const { user, accessToken } = await fetch('/api/v1/auth/signin', {
  method: 'POST',
  body: JSON.stringify({ phoneNumber })
}).then(r => r.json());
await AsyncStorage.setItem('accessToken', accessToken);

// 2. Create OTP
await fetch('/api/v1/auth/otp/create', {
  method: 'POST',
  headers: { 'Authorization': `Bearer ${accessToken}` }
});

// 3. Validate OTP
const { sessionToken } = await fetch('/api/v1/auth/otp/validate', {
  method: 'POST',
  headers: { 'Authorization': `Bearer ${accessToken}` },
  body: JSON.stringify({ otp })
}).then(r => r.json());
await AsyncStorage.setItem('sessionToken', sessionToken);

// 4. Make authenticated requests
const data = await fetch('/api/v1/users/current', {
  headers: { 'Authorization': `Bearer ${sessionToken}` }
}).then(r => r.json());