sp auth

Phase: v1
When agents use this: When SP_TOKEN is unset or expired.

Synopsis

Authenticate and inspect identity.

Subcommands

Subcommand	Flags	Description
login	--email, --code, --guest, --no-save	Obtain JWT
whoami	—	Current user from token
refresh	--user	Refresh token

Examples

sp auth login --email ops@corp.com --code 848291 --json
sp auth whoami --json
export SP_TOKEN="$(sp auth login ... --json | jq -r '.data.token')"

JSON output (login)

{
  "ok": true,
  "command": "auth login",
  "data": {
    "token": "eyJ...",
    "userName": "ops@corp.com",
    "expiresAt": "2026-05-19T12:00:00Z"
  }
}

REST mapping

Subcommand	Method	Path
login (email)	POST	/api/login/verify
login (guest)	POST	/api/login/loginAsGuest
refresh	GET	/api/login/refresh/{userName}
whoami	—	JWT decode locally, or future profile API

Request body for verify: VerifyRequestType (userName, verifyCode, …).

Replaces

None (new). CI uses SP_TOKEN directly.

Related

• Authentication guide