# POST Routes

All routes are relative to `AuthConfig.base_path` unless the note says server-root only.

| API Route | SDK Method(s) | Source | Notes |
| --- | --- | --- | --- |
| /admin/api-key/create | createClient().auth.admin.apiKey.create() | crates/api/src/plugins/admin/mod.rs |  |
| /admin/athena-client/create | createClient().auth.admin.athenaClient.create() | crates/api/src/plugins/admin/mod.rs |  |
| /admin/oauth-client/create | createClient().auth.admin.oauthClient.create() | crates/api/src/plugins/admin/mod.rs |  |
| /admin/ban-user | createClient().auth.admin.user.ban() | crates/api/src/plugins/admin/mod.rs |  |
| /admin/create-user | createClient().auth.admin.user.create() | crates/api/src/plugins/admin/mod.rs |  |
| /admin/email/create | createClient().auth.admin.email.create() | crates/api/src/plugins/admin/mod.rs |  |
| /admin/email/delete | createClient().auth.admin.email.delete() | crates/api/src/plugins/admin/mod.rs |  |
| /admin/email/update | createClient().auth.admin.email.update() | crates/api/src/plugins/admin/mod.rs |  |
| /admin/email-failure/create | createClient().auth.admin.email.failure.create() | crates/api/src/plugins/admin/mod.rs |  |
| /admin/email-failure/delete | createClient().auth.admin.email.failure.delete() | crates/api/src/plugins/admin/mod.rs |  |
| /admin/email-failure/update | createClient().auth.admin.email.failure.update() | crates/api/src/plugins/admin/mod.rs |  |
| /admin/email-template/create | createClient().auth.admin.email.template.create() | crates/api/src/plugins/admin/mod.rs |  |
| /admin/email-template/delete | createClient().auth.admin.email.template.delete() | crates/api/src/plugins/admin/mod.rs |  |
| /admin/email-template/update | createClient().auth.admin.email.template.update() | crates/api/src/plugins/admin/mod.rs |  |
| /admin/has-permission | createClient().auth.admin.hasPermission() | crates/api/src/plugins/admin/mod.rs |  |
| /admin/impersonate-user | createClient().auth.admin.user.impersonate() | crates/api/src/plugins/admin/mod.rs |  |
| /admin/list-user-sessions | createClient().auth.admin.user.session.list() | crates/api/src/plugins/admin/mod.rs |  |
| /admin/remove-user | createClient().auth.admin.user.remove() | crates/api/src/plugins/admin/mod.rs |  |
| /admin/revoke-user-session | createClient().auth.admin.user.session.revoke() | crates/api/src/plugins/admin/mod.rs |  |
| /admin/revoke-user-sessions | createClient().auth.admin.user.session.revoke() | crates/api/src/plugins/admin/mod.rs |  |
| /admin/set-role | createClient().auth.admin.role.set() | crates/api/src/plugins/admin/mod.rs |  |
| /admin/set-user-password | createClient().auth.admin.user.setPassword() | crates/api/src/plugins/admin/mod.rs |  |
| /admin/stop-impersonating | createClient().auth.admin.user.stopImpersonating() | crates/api/src/plugins/admin/mod.rs |  |
| /admin/unban-user | createClient().auth.admin.user.unban() | crates/api/src/plugins/admin/mod.rs |  |
| /api-key/create | createClient().auth.apiKey.create() | crates/api/src/plugins/api_key/mod.rs |  |
| /api-key/delete | createClient().auth.apiKey.delete() | crates/api/src/plugins/api_key/mod.rs |  |
| /api-key/delete-all-expired-api-keys | createClient().auth.apiKey.deleteAllExpired() | crates/api/src/plugins/api_key/mod.rs |  |
| /api-key/update | createClient().auth.apiKey.update() | crates/api/src/plugins/api_key/mod.rs |  |
| /api-key/verify | createClient().auth.apiKey.verify() | crates/api/src/plugins/api_key/mod.rs |  |
| /change-email | createClient().auth.changeEmail() | src/handlers/axum.rs | Plugin route takes precedence when enabled; core fallback also exists. |
| /change-password | createClient().auth.changePassword() | crates/api/src/plugins/password_management/mod.rs |  |
| /delete-user | createClient().auth.user.delete() | src/handlers/axum.rs |  |
| /forget-password | createClient().auth.forgetPassword() | crates/api/src/plugins/password_management/mod.rs |  |
| /get-access-token | createClient().auth.getAccessToken() | crates/api/src/plugins/oauth/mod.rs |  |
| /link-social | createClient().auth.social.link() | crates/api/src/plugins/oauth/mod.rs |  |
| /organization/accept-invitation | createClient().auth.organization.invitation.accept() | crates/api/src/plugins/organization/mod.rs |  |
| /organization/cancel-invitation | createClient().auth.organization.invitation.cancel() | crates/api/src/plugins/organization/mod.rs |  |
| /organization/check-slug | createClient().auth.organization.checkSlug() | crates/api/src/plugins/organization/mod.rs |  |
| /organization/create | createClient().auth.organization.create() | crates/api/src/plugins/organization/mod.rs |  |
| /organization/delete | createClient().auth.organization.delete() | crates/api/src/plugins/organization/mod.rs |  |
| /organization/has-permission | createClient().auth.organization.hasPermission() | crates/api/src/plugins/organization/mod.rs |  |
| /organization/invite-member | createClient().auth.organization.member.invite() | crates/api/src/plugins/organization/mod.rs |  |
| /organization/leave | createClient().auth.organization.leave() | crates/api/src/plugins/organization/mod.rs |  |
| /organization/reject-invitation | createClient().auth.organization.invitation.reject() | crates/api/src/plugins/organization/mod.rs |  |
| /organization/remove-member | createClient().auth.organization.member.remove() | crates/api/src/plugins/organization/mod.rs |  |
| /organization/set-active | createClient().auth.organization.setActive() | crates/api/src/plugins/organization/mod.rs |  |
| /organization/update | createClient().auth.organization.update() | crates/api/src/plugins/organization/mod.rs |  |
| /organization/update-member-role | createClient().auth.organization.member.updateRole() | crates/api/src/plugins/organization/mod.rs |  |
| /passkey/delete-passkey | createClient().auth.passkey.deletePasskey() | crates/api/src/plugins/passkey/mod.rs |  |
| /passkey/generate-authenticate-options | createClient().auth.passkey.generateAuthenticateOptions() | crates/api/src/plugins/passkey/mod.rs |  |
| /passkey/update-passkey | createClient().auth.passkey.updatePasskey() | crates/api/src/plugins/passkey/mod.rs |  |
| /passkey/verify-authentication | createClient().auth.passkey.verifyAuthentication() | crates/api/src/plugins/passkey/mod.rs |  |
| /passkey/verify-registration | createClient().auth.passkey.verifyRegistration() | crates/api/src/plugins/passkey/mod.rs |  |
| /refresh-token | createClient().auth.refreshToken() | crates/api/src/plugins/oauth/mod.rs |  |
| /reset-password | createClient().auth.resetPassword() | crates/api/src/plugins/password_management/mod.rs |  |
| /revoke-other-sessions | createClient().auth.session.revokeOther() | crates/api/src/plugins/session_management.rs |  |
| /revoke-session | createClient().auth.session.revoke() | crates/api/src/plugins/session_management.rs |  |
| /revoke-sessions | createClient().auth.session.revoke() | crates/api/src/plugins/session_management.rs |  |
| /send-verification-email | createClient().auth.sendVerificationEmail() | crates/api/src/plugins/email_verification/mod.rs |  |
| /set-password | createClient().auth.setPassword() | crates/api/src/plugins/password_management/mod.rs |  |
| /sign-in/email | createClient().auth.signIn.email() | crates/api/src/plugins/email_password.rs |  |
| /sign-in/social | createClient().auth.signIn.social() | crates/api/src/plugins/oauth/mod.rs |  |
| /sign-in/username | createClient().auth.signIn.username() | crates/api/src/plugins/email_password.rs |  |
| /sign-out | createClient().auth.signOut() | crates/api/src/plugins/session_management.rs |  |
| /sign-up/email | createClient().auth.signUp.email() | crates/api/src/plugins/email_password.rs |  |
| /two-factor/disable | createClient().auth.twoFactor.disable() | crates/api/src/plugins/two_factor.rs |  |
| /two-factor/enable | createClient().auth.twoFactor.enable() | crates/api/src/plugins/two_factor.rs |  |
| /two-factor/generate-backup-codes | createClient().auth.twoFactor.generateBackupCodes() | crates/api/src/plugins/two_factor.rs |  |
| /two-factor/get-totp-uri | createClient().auth.twoFactor.getTotpUri() | crates/api/src/plugins/two_factor.rs |  |
| /two-factor/send-otp | createClient().auth.twoFactor.sendOtp() | crates/api/src/plugins/two_factor.rs |  |
| /two-factor/verify-backup-code | createClient().auth.twoFactor.verifyBackupCode() | crates/api/src/plugins/two_factor.rs |  |
| /two-factor/verify-otp | createClient().auth.twoFactor.verifyOtp() | crates/api/src/plugins/two_factor.rs |  |
| /two-factor/verify-totp | createClient().auth.twoFactor.verifyTotp() | crates/api/src/plugins/two_factor.rs |  |
| /unlink-account | createClient().auth.account.unlink() | crates/api/src/plugins/account_management.rs |  |
| /update-user | createClient().auth.user.update() | src/handlers/axum.rs |  |
