When the user has to change his password before he can signin.
Auth required: No
Data example with stay logged in
Data example without stay logged in
Condition: Username and password is correct and account is activated.
Content example with stay logged in
Content example without stay logged in
Condition: User account is not activated.
The user has to wait until his account is activated by an administrator.
Condition: Username or password is wrong.
Condition: User tries to change his password after signin but does not need to.
A JSON Web Token is only for an hour valid. After expiring you can not use it anymore.