Sign in
Auth

Verify Email

Redeem a verification token to activate the account.

A valid single-use expiring token flips email_verified=True, is_active=True, and status="active" so the user can log in via the existing auth gate in dependencies.py.

Expired, unknown, and already-consumed tokens all return the same "Invalid or expired" error (enumeration-safe).

post/auth/verify-email/

Request

  • The document declares no server URL.
  • Auth: none declared

Request body

tokenstring required

Raw opaque verification token from the email link

Response

Successful Response

messagestring required
next_step'verify_email' | 'await_approval' nullable

Post-registration step for the client to display: 'verify_email' when a verification email was (or, for a swallowed collision, would have been) sent; 'await_approval' for the admin-approval path. None on non-register responses.

Changes

No recorded changes to this operation across all 50 revisions of this API.