# Flow: User Login

```mermaid
sequenceDiagram
    participant Client
    participant API as Admin API
    participant US as UserService
    participant DB as PostgreSQL
    participant Auth as AuthService

    Client->>API: POST /login {email, password}
    API->>US: ValidateUser(request)
    US->>DB: SELECT user WHERE email = ?
    DB-->>US: User record
    US->>US: Compare password hash (SHA-384)
    US-->>API: User entity
    API->>Auth: CreateToken(user)
    Auth-->>API: JWT string (HMAC-SHA256)
    API-->>Client: 200 OK {token}
```