Consume a verification token
POST /auth/verify-email
POST
/auth/verify-email
Single-use. The link the user receives carries a plaintext token that hashes to a stored row. On match: flips email_verified_at + consumes the token + returns the verified user shape (no cookie set — caller must sign in normally on the next page).
Request Body required
Section titled “Request Body required ”object
token
required
Plaintext token from the email link.
string
Responses
Section titled “ Responses ”Email verified.
object
user_ref
required
integer format: int64
username
required
string
email
required
string format: email
Token missing / malformed / expired / already used.
object
error
required
Human-readable error summary
string
Example
the request could not be completed