Multi-tenant authentication and user management service for fitness/coaching applications.
All endpoints (except /health) require a valid Firebase ID Token in the Authorization header:
Authorization: Bearer <firebase-id-token>
Production Server
Current user profile operations
Returns the authenticated user's profile with Stream Chat token
curl https://auth.simplecoaching.ai/api/v1/auth/user \
--header 'Authorization: Bearer YOUR_SECRET_TOKEN'
{
"id": "string",
"name": "string",
"level": 1,
"picture": "string",
"studio_id": "string",
"tenant": "string",
"license": "Elite"
}User profile retrieved successfully
Upload or update the current user's profile photo (JPEG/PNG/WebP/HEIC, max 10 MB)
curl https://auth.simplecoaching.ai/api/v1/auth/user/avatar \
--request POST \
--header 'Content-Type: multipart/form-data' \
--header 'Authorization: Bearer YOUR_SECRET_TOKEN'
{
"avatar_url": "string"
}Profile photo updated successfully
The current user's notification inbox
Customer management
Trainer management
TenantAdmin management (multi-studio administrators)
Statistics and analytics
Third-party data imports (onboarding migration)
Service health checks
Current user account management (passkeys, security settings)
Passwordless authentication using passkeys (WebAuthn)
The studio's Coaching Light subscription sold through the studio's own Airwallex account: the admin's settings, the customer's checkout, subscription and cancellation, and Airwallex's webhook.
Google Places-backed address search proxy. The Google API key
stays server-side; clients only ever talk to this service. Pair
the optional session_token across autocomplete keystrokes and
the final place-details lookup so Google bills the round-trip as
a single session (significantly cheaper than per-request).