Sign-in spec · API auth spec · source on GitHub