---
title: "Hosted email-action page (verify email, reset password)"
method: GET
path: "/auth/action"
tags: ["Auth Pages"]
---

# Hosted email-action page (verify email, reset password)

`GET /auth/action`

## Request

- Base URL: `https://api.hiyd.ai`
- URL: `https://api.hiyd.ai/auth/action`
- Auth: one of:
  - HTTP bearer
  - HTTP bearer

Landing page for the action links in hiyd's verification emails; `mode` picks the page. On mobile devices with the hiyd app installed the same URL can open as a Universal Link / App Link instead. New password-reset links go to /auth/reset-password, but mode=resetPassword is still served here for links sent before that change. Modes without a hosted page (e.g. recoverEmail) are redirected to the default Firebase handler.

## Query parameters

- `mode` string
- `oobCode` string

## Response `200`

HTML page for the requested mode

## Other responses

- `302`: Mode not hosted here; redirected to Firebase's handler

---

[API](https://skmtc.dev/hiyd/apis/hiyd-backend-api.md) - [All operations](https://skmtc.dev/hiyd/apis/hiyd-backend-api/llms.txt) - [OpenAPI document](https://skmtc.dev/hiyd/apis/hiyd-backend-api/revisions/23598d347e1b?raw)
