# POST /api/v1/login is deprecated

BambooHR API deprecated POST /api/v1/login without giving a shutdown date yet.

On May 12, 2025, BambooHR API marked POST /api/v1/login as deprecated in its OpenAPI documentation without announcing a shutdown date. Calls hitting this endpoint will eventually fail. BambooHR API announced this change alongside guidance recommending OAuth 2.0 for new integrations.

## What to use instead

Authenticate with OAuth 2.0 using an app registered on developers.bamboohr.com, alongside authorize.php and token.php on the company's domain, instead of generating API keys through /api/v1/login.

- API: BambooHR API (*.bamboohr.com)
- Kind: Endpoint removal
- Announced: May 12, 2025
- Takes effect: no date given yet
- Calls after that day: fail
- Calls it hits: `POST /api/v1/login`
- Source: [Announcement](https://documentation.bamboohr.com/docs/past-changes-to-the-api)
- Verified: November 6, 2026, against BambooHR API's own pages
- Page: https://www.okapi.bot/providers/bamboohr-api/breaking-changes/post-api-v1-login-is-deprecated/

## BambooHR API's words

> We marked POST /api/v1/login as deprecated in our OpenAPI documentation and added guidance recommending OAuth 2.0 for new integrations.

Okapi finds the calls this change hits in your repo and opens the pull request with the fix: https://github.com/apps/okapi-agent