--- openapi: post /auth ---