Skip to main content
Use this when setting up partners and their initial users.

​
1) Admin Login (Public)

POST /api/admin/login
Request body:
FieldTypeRequiredNotes
emailstringYesAdmin email
passwordstringYesMD5 string
Example: 
{
  "email": "admin@company.com",
  "password": "<MD5_PASSWORD_HASH>"
}
Response: 
{
  "data": {
    "accessToken": "eyJhbGciOi...",
    "expiration": 604800
  },
  "message": "success"
}

​
2) Create Partner User (Admin)

Requires: 
Authorization: Bearer <admin_jwt>
Endpoint: 
POST /api/admin/partners/users
Request body:
FieldTypeRequiredNotes
partnerIdstringYesMongo ObjectId
emailstringYesUser email
passwordstringYesMD5 string
firstNamestringNoOptional
lastNamestringNoOptional
phoneNumberstringNoOptional
rolestringYesadmin or user
Example: 
{
  "partnerId": "67a84f588277d6f3bc5ecfff",
  "email": "owner@partner.com",
  "password": "<MD5_PASSWORD_HASH>",
  "firstName": "Owner",
  "lastName": "Partner",
  "role": "admin"
}

​
3) List Partner Users (Admin)

GET /api/admin/partners/users?partnerId=<partnerId>
partnerId query is optional. If omitted, all users are listed.

​
4) Delete User (Admin)

DELETE /api/admin/partners/users/:id

​
Common Errors

  • 400 Email or password is not correct
  • 409 Conflict on duplicate email under same partner
  • 401 Unauthorized for missing/invalid admin JWT