# LoginResponse

> Returned by every sign-in.

Returned by every sign-in. Browser callers also receive the `guv_session` cookie.

## Fields

| Field | Type | Description |
| --- | --- | --- |
| `session` * | [SessionInfo](/docs/api/objects/session-info/) |  |
| `access_token` | string | Session bearer token (`guv_ses_…`) for non-browser clients. Shown once. |
| `csrf_token` * | string |  |
| `user` * | [User](/docs/api/objects/user/) |  |
| `new_user` | boolean |  |

\* always present

## Example

```json
{
  "session": {
    "id": "ses_01jbx2m9k7q4r8t5v6w3y0z1pr",
    "kind": "browser",
    "auth_method": "passkey",
    "user_agent": "string",
    "ip": "string",
    "current": false,
    "created_at": "2026-10-22T13:05:00Z",
    "last_seen_at": "2026-10-22T13:05:00Z",
    "expires_at": "2026-10-22T13:05:00Z"
  },
  "access_token": "string",
  "csrf_token": "string",
  "user": {
    "id": "usr_01jbx2m9k7q4r8t5v6w3y0z1us",
    "email": "stewart@primecarers.co.uk",
    "name": "Stewart Webb",
    "avatar_url": null,
    "github_login": "stewartwebb",
    "has_passkey": true,
    "is_platform_admin": true,
    "default_workspace_id": "ws_01jbx2m9k7q4r8t5v6w3y0z1ws",
    "created_at": "2026-10-22T09:00:00Z"
  },
  "new_user": false
}
```

## Used by

- [Sign in without a passkey (development only)](/docs/api/auth/#sign-in-without-a-passkey-development-only)
- [Finish registering a passkey](/docs/api/auth/#finish-registering-a-passkey)
- [Finish signing in with a passkey](/docs/api/auth/#finish-signing-in-with-a-passkey)