Mobile API

The platform provides a REST API for mobile app development or third-party integrations.

---

Authentication (Bearer Token)

The API uses token-based authentication (Bearer tokens) via Laravel Sanctum.

To obtain a token:

Send a POST request to /api/v1/auth/login with your email and password:

{
  "email": "you@example.com",
  "password": "your-password"
}

The response includes an access_token. Include this token in all subsequent requests:

Authorization: Bearer {access_token}

Tokens expire after 30 days. Use /api/v1/auth/logout to revoke a token.

---

Available Endpoints

Method	Endpoint	Auth Required	Description
POST	/api/v1/auth/login	No	Obtain a Bearer token
POST	/api/v1/auth/register	No	Create a new user account
POST	/api/v1/auth/logout	Yes	Revoke current token
POST	/api/v1/auth/logout-all	Yes	Revoke all tokens
GET	/api/v1/events	No	List published events
GET	/api/v1/events/{slug}	No	View a single event
GET	/api/v1/events/{slug}/agenda	No	View event sessions
GET	/api/v1/events/{slug}/floor-plans	No	List published floor plans
GET	/api/v1/events/{slug}/floor-plans/{id}	No	Floor plan + markers
GET	/api/v1/profile	Yes	View/update user profile
GET	/api/v1/registrations	Yes	List user’s registrations
GET	/api/v1/attendees	Yes	Browse attendee directory
POST	/api/v1/sessions/{id}/register	Yes	Register for a session
POST	/api/v1/sessions/{id}/bookmark	Yes	Bookmark a session
GET	/api/v1/organizations	Yes	List user’s organizations

Full API documentation (including request/response schemas) is auto-generated by Scramble and available at /api/docs.

---

Rate Limits

User Type	Limit
Authenticated	60 requests per minute
Unauthenticated	30 requests per minute

When the rate limit is exceeded, the API returns a 429 Too Many Requests response.