Sprift User API
The User tag of the published Sprift v1 contract — two operations, POST /user/login and GET /user/logout, that exist specifically for embedding. The contract is explicit that this is not the authentication path for API calls: "You do not need to call this Endpoint with your API username and password in order to use the API. This Endpoint is intended to those who want to add Sprift platform into their platforms using an iFrame and let Sprift users to login to Sprift." Login takes a username and password as form data alongside the required SPRIFT-API-KEY header, so a partner platform authenticates a Sprift end user on the partner's behalf.