Probe a magic link without consuming it
HEAD does not consume a token and does not set a session cookie. A usable template link returns 200 text/html with an empty body and Cache-Control no-store. A usable plain link returns 200 with an empty body, no content type, and Cache-Control no-store. A missing token returns 400 { error: "token required" }. An unknown, used, expired, or wrong-purpose token returns 400 { error: "invalid or expired" }. No API key.
head/api/v1/auth/verify
Request
- Base URL: https://applytovolunteer.com
- URL: https://applytovolunteer.com/api/v1/auth/verify
- Auth: none required
Query parameters
tokenstring required
Magic-link token from the email.
Response
Usable token. Empty body. Cache-Control is no-store. A template link also sends text/html. A plain link sends no content type. The token is not consumed and no session cookie is set.
Changes
No recorded changes to this operation across all 1 revision of this API.