POST /auth/anonymous

Create a temporary anonymous session and return a restricted JWT token (anonymous role, no refresh token), for browsing public content or low-risk operations. Anonymous user IDs are prefixed with anon_.

Request Body

Schema: dto.AnonymousSigninRequest

Field	Type	Required	Example	Constraints	Description
tenant_id	string	No	tnt_xyz789		Tenant ID

Responses

Status	Description	Schema
200	Anonymous session created, returning restricted JWT token	dto.LoginByCodeResponse
400	Invalid request parameters	gitee_com_linmes_authms_base_dto.SimpleResponse
500	Internal server error	gitee_com_linmes_authms_base_dto.SimpleResponse

Referenced Schemas

dto.LoginByCodeResponse

Field	Type	Required	Example	Constraints	Description
access_token	string	No
expires_in	integer	No
is_new_user	boolean	No
refresh_token	string	No
token_type	string	No
user	dto.UserInfo	No
user_id	string	No			User ID (redundant with User.ID for flat access)

dto.UserInfo

User basic information

Field	Type	Required	Example	Constraints	Description
created_at	string	No	2026-01-15T10:30:00Z		Account creation time
email	string	No	john@example.com		Email
id	string	No	usr_abc123		User ID
must_change_password	boolean	No	False		Password must be changed
password_expires_in	integer	No	30		Days until password expires
password_warning	string	No	expiring		Password warning: expiring/expired_grace/expired
phone	string	No	13800138000		Phone
status	string	No	active		Status
username	string	No	john.doe		Username

gitee_com_linmes_authms_base_dto.SimpleResponse

Field	Type	Required	Example	Constraints	Description
code	integer	No
message	string	No
timestamp	string	No