> For the complete documentation index, see [llms.txt](https://tech.x2bee.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://tech.x2bee.com/api-guide/api-guides-en/store-front-api/member-service/login-service.md).

# Login Service

Provides an authentication feature that lets customers who have completed sign-up log in and access their account. Customers can enter their personal information and log in to enjoy a personalized shopping experience. Describes the APIs used during login and logout. Customers who have completed sign-up can log in using either standard login or easy login.

If you are not a member of the X2BEE shopping mall, you can sign up via the easy login service.\
If you are already a registered member, you can use the easy login service by linking your registered account with your Kakao or Naver account.

***

## Login

<figure><img src="https://2999922013-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FXTxKSWMmuxEkop1pvuwe%2Fuploads%2F1LI5FoO5E1HaueP8S5rw%2Fimage.png?alt=media&#x26;token=afc61514-fdbf-4ff5-8248-7b34bd38ea23" alt="" width="230"><figcaption></figcaption></figure>

{% stepper %}
{% step %}

### Check Auto Login

If the customer checks auto login and proceeds to log in, they will be logged in automatically from then on.

* **Issue token information (**[🔗View API >](https://api.x2bee.com/content?msa=member\&depth=%EB%A1%9C%EA%B7%B8%EC%9D%B8\&path=saveAutoToken))\
  Calls this API with the ID and password entered by the user for auto login, and if valid, issues an auto-login token that is valid for 10 years.

```
POST /v1/front/tokenIssu 
```

{% endstep %}

{% step %}

### Log In

Provides the login service using the ID and password of a customer who has completed sign-up.

If easy login linkage has been completed, you can log in via this API.

For the API related to easy login linkage, please refer to section 2, "Link Easy Login," in the Sign Up document.

* **Login(**[🔗View API >](https://api.x2bee.com/content?msa=member\&depth=%EB%A1%9C%EA%B7%B8%EC%9D%B8\&path=login))\
  Calls this API with the ID and password entered by the user, and if valid, issues an accessToken valid for 120 minutes and a refreshToken that can be used to renew it once the accessToken expires.

```
POST /v1/front/login 
```

{% endstep %}
{% endstepper %}

***

## Logout

Logout can be found in the full menu or the site footer.

<figure><img src="https://2999922013-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FXTxKSWMmuxEkop1pvuwe%2Fuploads%2FvgCkXZtAVDFWgZliaqgl%2Fimage.png?alt=media&#x26;token=f75e013a-dc10-4bd3-bb1a-57800678b044" alt="" width="230"><figcaption></figcaption></figure>

{% stepper %}
{% step %}

### Log Out

* **Logout (**[🔗View API >](https://api.x2bee.com/content?msa=member\&depth=%EB%A1%9C%EA%B7%B8%EC%9D%B8\&path=logout))\
  Deletes the authorized refresh token issued at login and held on the server side, so that the access token is no longer renewed.

```
POST /v1/front/logout 
```

{% endstep %}
{% endstepper %}

***

## Periodic Password Change

If a logged-in member has not changed their password in 90 days, a password change popup automatically appears.

This does not apply to members using the easy login service; the member can either postpone the password change by 90 days or proceed with the change.

<figure><img src="https://2999922013-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FXTxKSWMmuxEkop1pvuwe%2Fuploads%2FZlXRquv0zV3ofHcEgFhx%2Fimage.png?alt=media&#x26;token=4faae818-be81-4fe6-a864-68ee9626f8c6" alt="" width="230"><figcaption></figcaption></figure>

{% stepper %}
{% step %}

### Change Password

* **Modify password (**[🔗View API >](https://api.x2bee.com/content?msa=member\&depth=%EC%95%84%EC%9D%B4%EB%94%94%20%EB%B9%84%EB%B0%80%EB%B2%88%ED%98%B8%EC%B0%BE%EA%B8%B0/modifyPassword))\
  There are three types of password changes.
  * Change later: Updates the member's password change timestamp to the time the button was clicked
  * Change password: Verifies the current password before changing it, requiring entry of the current password and the new password

```
PUT /v1/member/changePassword 
```

{% endstep %}
{% endstepper %}

***

## Find ID

Proceeds to find the ID after identity verification.

<figure><img src="https://2999922013-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FXTxKSWMmuxEkop1pvuwe%2Fuploads%2F74clpZCDwv2MuVjPPvMf%2Fimage.png?alt=media&#x26;token=275ad826-ea48-45d7-8aab-2a90e7886bf2" alt="" width="375"><figcaption></figcaption></figure>

{% stepper %}
{% step %}

### Find ID

* Find ID([🔗View API >](https://api.x2bee.com/content?msa=member\&depth=%EC%95%84%EC%9D%B4%EB%94%94%20%EB%B9%84%EB%B0%80%EB%B2%88%ED%98%B8%EC%B0%BE%EA%B8%B0/getMemberFindId))\
  If a customer has lost their ID, they can look up their account's ID via Find ID.\
  The looked-up member name and ID are returned partially masked.

```
POST /v1/member/findId 
```

{% endstep %}
{% endstepper %}

***

## Find Password

Before changing a lost password to a new one, the entered ID is checked for existence.

If the ID exists, the identity verification process proceeds, and after identity verification, the account's password can be changed immediately.

{% hint style="warning" %}
Members who signed up via the easy login service are not eligible for password recovery, so they cannot change their password.
{% endhint %}

{% stepper %}
{% step %}

### **Look Up ID**

* **Check ID (**[🔗View API >](https://api.x2bee.com/content?msa=member\&depth=%EC%95%84%EC%9D%B4%EB%94%94%20%EB%B9%84%EB%B0%80%EB%B2%88%ED%98%B8%EC%B0%BE%EA%B8%B0/checkLoginId))\
  If a customer has lost their password, checks whether the ID targeted for a password change exists.

```
GET /v1/member/checkLoginId 
```

{% endstep %}

{% step %}

### Change Password

* **Change password**([🔗View API >](https://api.x2bee.com/content?msa=member\&depth=%EC%95%84%EC%9D%B4%EB%94%94%20%EB%B9%84%EB%B0%80%EB%B2%88%ED%98%B8%EC%B0%BE%EA%B8%B0/modifyPassword))\
  Changes the member's password.\
  If the member signed up via the easy login service, a separate password does not exist, so password change is not supported.

```
PUT /v1/member/changePassword 
```

{% endstep %}
{% endstepper %}