Account
Account

Sign-in by email — step A: get a pairing code

Called from the device logged in BY EMAIL (Dynamic). Proves the email with the Dynamic session JWT — it must carry exactly one credential with format == 'email' in verified_credentials[] — and returns an 8-character code valid for 10 minutes. Type the code on the device that holds the executor's wallet (step B). Only the code's sha256 is stored. At most 5 codes per Dynamic user per hour.

post/api/v1/account/login-email/code

Request

  • Base URL: https://api.execution.market
  • URL: https://api.execution.market/api/v1/account/login-email/code
  • Auth: API key in header Signature-Input

Headers

authorizationstring nullable

Bearer <supabase_jwt>

Request body

dynamic_jwtstring required

The Dynamic session JWT of the EMAIL login. Its verified_credentials[] must hold exactly one credential with format == 'email'.

Response

Successful Response

codestring required

8 characters, uppercase, alphabet without 0/O/1/I/L

expires_atstring required

ISO8601 UTC; 10 minutes from now

email_hintstring required

The masked email this code pairs (e.g. o***@e***.com). The device with the wallet shows the same hint before signing: show it next to the code so the person can compare.

Changes

No recorded changes to this operation across all 1 revision of this API.