Skip to main content
POST
/
api
/
security
/
mobile-auth
Mobile app authentication
curl --request POST \
  --url https://api.propops.app/api/security/mobile-auth \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "action": "validate_token",
  "token": "<string>",
  "platform": "ios",
  "device_type": "iPhone",
  "app_version": "2.1.0"
}
'
{
  "success": true,
  "message": "Operation completed successfully",
  "session_token": "<string>",
  "csrf_token": "<string>",
  "user": {
    "ID": 1,
    "uuid": "660e8400-e29b-41d4-a716-446655440001",
    "first_name": "User_001",
    "last_name": "Surname_001",
    "email": "user001@example.com",
    "phone": "07700000001",
    "account_type_id": 1,
    "account_type_name": "Staff",
    "account_status_id": 1,
    "account_status_name": "Active",
    "branch_id": 1,
    "role_id": 2,
    "created_at": "2024-01-01T09:00:00Z"
  }
}

Authorizations

​
Authorization
string
header
required

All API requests must include a valid Bearer token in the Authorization header. Tokens are 64-character SHA-256 session hashes issued by the PropOps authentication system.

Example:

Authorization: Bearer a1b2c3d4e5f6...

Body

application/json
​
action
enum<string>
required
Available options:
validate_token,
logout
​
token
string

Authentication token (required for validate_token)

​
platform
enum<string>
Available options:
ios,
android
Example:

"ios"

​
device_type
string
Example:

"iPhone"

​
app_version
string
Example:

"2.1.0"

Response

Mobile auth response

​
success
boolean
Example:

true

​
message
string
Example:

"Operation completed successfully"

​
session_token
string
​
csrf_token
string
​
user
object