# components.securitySchemes.widgetBearer.description
Short-lived widget token in the Authorization header.

# components.securitySchemes.widgetHeader.description
Short-lived widget token in a custom header.

# info.description
Peptide Tracker uses anonymous access-code authentication with secure cookies for browser sessions and short-lived widget tokens for read-only widget access.

# info.summary
Session, widget, and health endpoints for Peptide Tracker.

# paths./auth/access-code.get.summary
Reveal the current user's saved access code

# paths./auth/login.post.requestBody.content.application/json.schema.properties.accessCode.description
12-character access code with or without dashes.

# paths./auth/login.post.summary
Exchange an access code for browser session cookies

# paths./auth/me.get.summary
Return the current authenticated user profile

# paths./auth/refresh.post.summary
Refresh the access cookie from the refresh cookie

# paths./auth/signup.post.responses.200.description
Account created. Response body varies by HTML or JSON caller.

# paths./auth/signup.post.summary
Create an anonymous account and session cookies

# paths./dashboard/api/widget.get.responses.401.description
Widget token missing, invalid, or expired.

# paths./dashboard/api/widget.get.summary
Read widget payload using a short-lived token

# paths./dashboard/api/widget/token.post.summary
Exchange an access code for a short-lived widget token

# tags[].description
Read-only widget token and widget data endpoints.