Sessions & OAuth
Authentication
Google Workspace login, CMYK OTP, magenta_auth, and dev bypass.
Admin console (Google Workspace)
GET /api/auth/status— check if OAuth is configuredGET /api/auth/google/start— begin OAuth flow- Callback:
/api/auth/google/callback - Session cookie:
magenta_session
Local dev bypass
When GOOGLE_CLIENT_ID is a placeholder, use dev bypass on the admin login page
or GET /api/auth/dev/bypass/scott@derozic.com.
CMYK mobile OTP
# Send OTP
POST /api/cmyk/auth/otp/send
{"phone": "+15551234567"}
# Verify
POST /api/cmyk/auth/otp/verify
{"phone": "+15551234567", "code": "123456"}