---
title: "POST /api/auth/callback/user-email-code"
method: POST
path: "/api/auth/callback/user-email-code"
tags: ["Public"]
---

# POST /api/auth/callback/user-email-code

`POST /api/auth/callback/user-email-code`

## Request

- Base URL: `https://idkrx.com`
- URL: `https://idkrx.com/api/auth/callback/user-email-code`
- Auth: none required

Exchange a challenge token for the session cookie. A refusal is still 200, with error= in the returned url.

## Headers

- `X-Auth-Return-Redirect` '1', required

## Response `200`

Where Auth.js would redirect

- AuthRedirect
  - `url` string, required

---

[API](https://skmtc.dev/idkrx/apis/idkrx-api.md) · [All operations](https://skmtc.dev/idkrx/apis/idkrx-api/llms.txt) · [OpenAPI document](https://skmtc.dev/idkrx/apis/idkrx-api/revisions/086725fb5578?raw)