Authentication

Sign in

Make sure you're passing all Security headers or you might stumble upon {"code":28,"message":"ACCOUNT_BANNED","profileId":null,"type":1,"reason":null,"isBanAutomated":true,"thirdPartyUserIdToShow":null,"banSubReason":null} — but don't fret — it's a fake error, your account isn't banned and API simply blocked your request, not account.

POST /v8/sessions

Body:

• email — string with email
• password — string with password, don't specify if using authToken
• authToken — string obtained from login+password flow or null
• token — FCM (push service) string or null
• geohash — geohash string or null

Response:

• profileId — string with numbers, account's ID
• sessionId — Session ID
• authToken — string, Auth token for session refresh

Errors:

• ACCOUNT_BANNED — could be malformed request
• INVALID_INPUT_PARAMETERS — incorrect credentials

SessionCreateRequest

• email — string with email
• password — string with password, don't specify if using authToken
• authToken — string obtained from login+password flow or null
• token — FCM (push service) string or null
• geohash — geohash string or null

AuthSessionResponse

• profileId — string with numbers, account's ID
• sessionId — Session ID
• authToken — string, Auth token for session refresh

Session ID

JWT obtained from authentication flow. Decoded JWT content:

Headers claims structure:

• kid — key ID
• alg — "RS256"
• typ — "JWT"

Payload claims:

• exp — number, unix timestamp in seconds defining token expiration date
• profileId — string with numbers, account's ID
• roles — unknown array, appears to be empty
• features — array of strings, e.g. "HidePremiumStore", "CreateVideoCall", "VideoCallDailyFree"
• featureFlags — array of strings, e.g. "profile-insights", "online-until-updates", "enable-account-filters-bulk-exposure", "a-list-v3", "discover-v2", "boost_purchase_fixes", "discover-studfinder-upsell"
• experiments — object with experiment name → variant string, known keys:
  • explore-paywall-profiles — string, e.g. "test"
  • limiting_chat_credits_from_unlimited_to_5_for_xtra_users_in_explore — string, e.g. "treatment"
  • validation-aa-backend-profileid — string, e.g. "test"
  • grindr-core-day-pass — string, e.g. "control"
  • llm-age-verification-methods — string, e.g. "variant_b"
  • trans_tribe_filtering_changes — string, e.g. "Test"
  • green_dot_v2 — string, e.g. "treatment-1"
  • sponsored-profiles-cascade-selection-mode — string, e.g. "treatment"
  • read-receipt-ad-reward — string, e.g. "variant_2"
  • taps-paywall — string, e.g. "treatment-1"
  • explore-insertables-v1 — string, e.g. "treatment-insertables-below-mpu"
  • reduce_number_of_free_profiles_from_99_to_90 — string, e.g. "test"
  • cascade-mpu-explore-studfinder-2026-03-12 — string, e.g. "control"
  • reduce_number_of_results_with_age_filter_for_free_users — string, e.g. "test"
  • mpu-heuristic-algorithm-optimizations-q125 — string, e.g. "control"
  • ships_in_the_night_v3 — string, e.g. "treatment"
  • cascade-mpu-disable-poc-heuristic-2026-03-02 — string, e.g. "treatment"
  • for-you-recsys-v1_1 — string, e.g. "control"
  • cascade-mpu-studfinder-profile-limit-2026-03-12 — string, e.g. "treatment"
  • reduce_free_user_results_with_any_filter — string, e.g. "control"
  • cascade-mpu-studfinder-unlimited-2026-02-02 — string, e.g. "treatment"
  • mpu-rest-of-world — string, e.g. "treatment"
  • top_18_mpu_profiles_are_online_in_extended_cascade_and_explore — string, e.g. "control"
  • for-you-v2 — string, e.g. "Test"
  • rewarded-ads-viewed-me-v2 — string, e.g. "variant_1"
  • mega-boost-v1 — string, e.g. "mega-boost-low"
• systemTime — unix timestamp in milliseconds
• upsells — unknown object, appears to be empty
• restrictionReason — unknown value, appears to be null
• grit — unknown UUIDv4 string