# API Reference

## Authentication

### POST /v1/token
Query params:
- `username` (optional, default: `admin`)

Response:
```json
{"access_token":"<jwt>"}
```

Use `Authorization: Bearer <jwt>` for protected endpoints.

## Enrollment

### POST /v1/enroll
Body:
```json
{"identity_id":"u1","image_b64":"...","metadata":{"dept":"R&D"}}
```

Response:
```json
{"identity_id":"u1","indexed":true,"embedding_dim":512}
```

## Search

### POST /v1/search
Body:
```json
{"image_b64":"...","top_k":5}
```

## Identity Metadata

### GET /v1/identity/{id}
Returns metadata for enrolled identity.

## Health

- `GET /healthz` on each service.
- `POST /snapshot` on vector-search to force index persistence.