Last Updated: February 25, 2026

Overview

Herald exposes a REST API built on Next.js API Routes. All endpoints return JSON responses and follow standard HTTP status codes.

Herald Auth APIs

Base URL

Production: https://auth.todayscarolinian.com/api

Development: http://localhost:3000/api

Herald Auth Public Routes (No Auth Required)

POST /api/login

Authenticate user with email and password.

Request Body:

{
  "email": "[email protected]",
  "password": "SecurePassword123!",
  "rememberMe": false  // optional, defaults to false
}

Response (200 OK):

{
  "success": true,
  "data": {
    "user": {
      "uid": "abc123xyz789",
      "email": "[email protected]",
      "firstName": "John",
      "lastName": "Doe",
      "position": "Staff Writer",
      "mustChangePassword": false
    },
    "redirectUrl": "/profile"  // or original returnUrl
  }
}

Error Responses:

• 400 - Missing email or password
• 401 - Invalid credentials
• 429 - Rate limit exceeded (5 attempts in 15 min)

Side Effects: