# Logging In

## Login and Begin Session

 - [POST /sessions](https://docs.cognitivesystems.com/assets/specs/api/app_cloud/logging-in/post_sessions.md): Session create for a user. Each session create updates a "valid_from" UTC timestamp column in the user model. 

Any subseqeuent session creates for the same user will invalidate any previously issued tokens, effectively preventing account sharing or multiple devices being logged-in with the same account.

## Re-login and refresh existing session

 - [PATCH /sessions](https://docs.cognitivesystems.com/assets/specs/api/app_cloud/logging-in/patch_sessions.md): Used by Wifi Motion app to refresh session and issue new auth + refresh tokens.

## Login using Apple account and Begin Session

 - [POST /sessions/sso/apple](https://docs.cognitivesystems.com/assets/specs/api/app_cloud/logging-in/post_sessions_sso_apple.md): This API endpoint allows users to create a session by authenticating via Apple’s Single Sign-On (SSO). 

The endpoint validates an Apple JWT token and then follows the /sessions flow to establish a user session

## Login using Google account and Begin Session

 - [POST /sessions/sso/google](https://docs.cognitivesystems.com/assets/specs/api/app_cloud/logging-in/post_sessions_sso_google.md): This API endpoint allows users to create a session by authenticating via Google’s Single Sign-On (SSO). 

The endpoint validates an Google JWT token and then follows the /sessions flow to establish a user session

## Login using AWS Cognito and Begin Session

 - [POST /sessions/sso/cognito](https://docs.cognitivesystems.com/assets/specs/api/app_cloud/logging-in/post_cognito_sso.md): This API endpoint allows users to create a session by authenticating via AWS Cognito's Single Sign-On (SSO). 

The endpoint validates an Cognito JWT token and then follows the /sessions flow to establish a user session

## Show Users

 - [GET /users/{id}](https://docs.cognitivesystems.com/assets/specs/api/app_cloud/logging-in/get_users-id.md): Get basic user information

## Reset Account Password

 - [PUT /password_resets](https://docs.cognitivesystems.com/assets/specs/api/app_cloud/logging-in/put_password_resets.md): Update user password. Endpoint used by the 'Enter new password page' in the reset password flow.

## Logout

 - [POST /logout](https://docs.cognitivesystems.com/assets/specs/api/app_cloud/logging-in/post_logout.md): End the session for the current user. Requires valid JWT.