Consumer signup

Consumer signup

Consumers register against a published developer portal subdomain. Accounts are tenant-scoped (role = member) and receive a JWT for dashboard/API key self-service.

Endpoints

Method	Path	Body
POST	/v1/consumers/register	{ email, password, name?, portalSubdomain }
POST	/v1/consumers/login	{ email, password }

CORS is open on these two paths so the static customer-portal app can call core-platform directly.

Portal UI

Open Sign up on this portal. Set build-time env:

• TENANT_API_URL — core-platform origin (optional; CI falls back to CORE_PLATFORM_URL)
• TENANT_PORTAL_SUBDOMAIN — the published developer_portals.subdomain

Do not leave TENANT_API_URL as an empty string in CI — that bakes a relative /v1/... URL into the static pages and Cloudflare Pages returns 405 on POST.

After login

Use the access token as Authorization: Bearer <token> against consumer self-service APIs.

Method	Path	Description
GET	/v1/consumers/api-keys	List your API keys (prefix only)
POST	/v1/consumers/api-keys	Create key ({ name, scopes? }) — secret shown once
DELETE	/v1/consumers/api-keys/:keyId	Revoke a key

Portal UI: API keys (requires sign-in via Login).