Lucha Libre CDMX nuzur

Deployed API — how to reach it. Every command below targets https://auth.luchalibrescdmx.com, the address you used to open this page.

gRPC API

Reachable at auth.luchalibrescdmx.com — the same address as this page. List services:

grpcurl auth.luchalibrescdmx.com list

Inside the container gRPC listens on port 6009, behind the proxy; that port is not reachable from outside.

REST API

Base https://auth.luchalibrescdmx.com/v1. Example — list arena:

curl https://auth.luchalibrescdmx.com/v1/arenas

Inside the container HTTP listens on port 8080, behind the proxy; that port is not reachable from outside. Collection paths are plural and kebab-cased.

Authentication

JWT — sign in for a token, then send Authorization: Bearer <token>. Signin answers with {"Token":"...","Expires":"..."} — the field names are capitalised.

curl -s -X POST https://auth.luchalibrescdmx.com/signin -H 'Content-Type: application/json' -d '{"email":"...","password":"..."}'

End to end:

TOKEN=$(curl -s -X POST https://auth.luchalibrescdmx.com/signin -H 'Content-Type: application/json' -d '{"email":"...","password":"..."}' | jq -r .Token)
curl https://auth.luchalibrescdmx.com/v1/arenas -H "Authorization: Bearer $TOKEN"
grpcurl -H "authorization: Bearer $TOKEN" auth.luchalibrescdmx.com list

Also POST /refresh and POST /validate, on the same address.

These endpoints are served here whether or not a REST API is enabled — a gRPC-only deployment still signs in over HTTP at this address. A 401 from signin means the email matched no user row or the password was wrong; a user row must exist in your user entity with a bcrypt hash in its password column, not a plaintext password.

Entities