1. Login

Login to the system. If credentials are invalid response with 403 status code will be returned. Token will be valid for the next 120 minutes.

1.1. CURL sample

$ curl 'https://minerva-dev.lcsb.uni.lu/minerva/api/doLogin?login=admin&password=admin' -X POST \
    -d 'login=admin&password=admin' \
    -H 'Content-Type: application/octet-stream'

1.2. Form Parameters

Parameter Description

login

login

password

password

1.3. Response Fields

Path Type Description

info

String

status message

login

String

user login

userId

Number

user id

token

String

session token

accessToken

String

short-lived bearer access token; absent if api.secretKey is not configured

refreshToken

String

long-lived refresh token used to obtain new access tokens

accessTokenExpiresAt

String

absolute access token expiration (ISO-8601 with zone offset)

refreshTokenExpiresAt

String

absolute refresh token expiration (ISO-8601 with zone offset)

accessTokenExpiresIn

Number

access token lifetime in seconds

refreshTokenExpiresIn

Number

refresh token (sliding inactivity window) lifetime in seconds

1.4. Sample Response

{
  "info" : "Login successful.",
  "token" : "704",
  "login" : "admin",
  "userId" : 1,
  "accessToken" : "eyJhbGciOiJIUzUxMiJ9.eyJzdWIiOiJhZG1pbiIsImZpcnN0TmFtZSI6IiIsImxhc3ROYW1lIjoiIiwidHlwZSI6IkFDQ0VTUyIsImp0aSI6Ijg3Zjk4YTg4LTk2NjUtNGE3ZC05NTQ3LTEzMTVhMDdjZTM5YyIsImlhdCI6MTc5MDIwNTIyNiwiZXhwIjoxNzkwMjA2MTI2fQ.EZFSd1YOD8AaukrNDQ-nGY7Nkdax5HdxlnFXefWs7uLC2wKZjbopFHKi8Hf-XowmOyi6lL1SoJ_MHL4CDj2Gww",
  "refreshToken" : "Kzq0FgGLiH7__u3mS1VY24G11NprbcM3YhjteNLjcic",
  "accessTokenExpiresAt" : "2026-09-23T23:28:46Z",
  "refreshTokenExpiresAt" : "2026-09-24T01:13:46Z",
  "accessTokenExpiresIn" : 900,
  "refreshTokenExpiresIn" : 7200
}

2. Logout

Logout from the system.

2.1. CURL sample

$ curl 'https://minerva-dev.lcsb.uni.lu/minerva/api/doLogout' -X POST \
    --cookie 'MINERVA_AUTH_TOKEN=xxxxxxxx'

2.2. Response Fields

Path Type Description

status

String

status message

2.3. Sample Response

{
  "status" : "OK"
}

3. Check if session is still valid

Sometimes there is need for verification if user is authenticated in the current session (for instance we might need this information to check if our session did not expire). This API call returns information if the session is still valid.

3.1. CURL sample

$ curl 'https://minerva-dev.lcsb.uni.lu/minerva/api/users/isSessionValid' -X GET \
    --cookie "MINERVA_AUTH_TOKEN=xxxxxxxx"

3.2. Response Fields

Path Type Description

login

String

user login of the session owner

userId

Number

user id of the session owner

token

String

authentication token

3.3. Sample Response

{
  "login" : "admin",
  "token" : "701",
  "userId" : 1
}