curl -X POST http://localhost:8002/osm/api/login \
  -H "Content-Type: application/json" \
  -d '{
    "username": "osmedeus",
    "password": "your-password"
  }'

{
  "token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6Im9zbWVkZXVzIiwiZXhwIjoxNzA0MDY3MjAwLCJpYXQiOjE3MDQwNjM2MDB9.abc123..."
}

{
  "error": true,
  "message": "Invalid request body"
}

{
  "error": true,
  "message": "Invalid credentials"
}

curl -X POST http://localhost:8002/osm/api/logout

{
  "message": "Logged out successfully"
}

# Store token in environment variable
export TOKEN="eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9..."

# Use in API requests
curl http://localhost:8002/osm/api/workflows \
  -H "Authorization: Bearer $TOKEN"

{
  "error": true,
  "message": "Missing authorization header"
}

{
  "error": true,
  "message": "Invalid authorization header format"
}

{
  "error": true,
  "message": "Invalid or expired token"
}

server:
  # Enable API key authentication (default: true)
  enabled_auth_api: true
  # API key for x-osm-api-key header authentication
  # A random 32-character key is generated on first run
  auth_api_key: "your-api-key-here"

# Store API key in environment variable
export OSM_API_KEY="your-api-key-here"

# Use in API requests
curl http://localhost:8002/osm/api/workflows \
  -H "x-osm-api-key: $OSM_API_KEY"

{
  "error": true,
  "message": "Invalid or missing API key"
}

osmedeus server --no-auth