# devRant API: Authentication & accounts Write operations authenticate with the devRant token triple. Log in once below and every authenticated widget across these pages becomes runnable (the token is kept in your browser only). Read operations ([rants](/docs/devrant-rants.html), [profiles](/docs/devrant-users.html)) need no authentication. `POST /api/users/auth-token` returns an `auth_token` whose `id` is the `token_id`, `key` is the `token_key`, and `user_id` is the integer user id; those three are sent automatically by these widgets (query params for `GET`/`DELETE`, form body for `POST`). A bad login returns HTTP `400`. See the [overview](/docs/devrant.html) for the response envelope.