Skip to content
LogoLogo

Verify an email address

Verify an email address

POST/api/v1/auth/email/verify

Redeems the single-use token carried by the verification email link. Redemption is atomic, so a replayed link fails rather than verifying twice, and an expired or unknown token is refused identically to a spent one.

Request Body

application/json
tokenRequired
string·min 1·max 512

A single-use, expiring bearer secret delivered by email. Only its hash is stored, so it cannot be recovered from a database disclosure. Treat it as a credential: never log it or place it in a URL you retain.

Responses