Autenticação

A API usa JWT Bearer tokens.

Login

POST /api/auth/login
Content-Type: application/json

{
  "email": "usuario@empresa.com",
  "password": "suasenha"
}

Response 200:

{
  "token": "eyJhbGciOiJIUzI1...",
  "user": {
    "id": "uuid",
    "email": "usuario@empresa.com",
    "name": "Nome",
    "role": "admin",
    "tenant_id": "uuid",
    "permissions": {},
    "funnels": []
  }
}

Usar o token

Inclua em todas as requests:

Authorization: Bearer eyJhbGciOiJIUzI1...

Registrar novo tenant

POST /api/tenants/register
Content-Type: application/json

{
  "name": "Seu Nome",
  "email": "email@empresa.com",
  "password": "minimo8chars",
  "company": "Nome da Empresa"
}

Response 201: Token + user + tenant criados.

Roles e permissões

Role	Descrição
admin	Acesso total ao tenant
sdr	Pre-vendas (Social Seller)
closer	Vendedor
sdr_closer	Ambas funcoes

Permissoes granulares: can_delete_leads, can_manage_channels, can_manage_funnels, can_export_all