Auth

Start a passwordless email-code ceremony

Available only while ONBOARDING_V3_ENABLED is true. Signin remains enumeration resistant. Signup explicitly returns existingAccount=true for an existing Median account without issuing or delivering a code.

post/auth/otp/start

Request

  • Base URL: https://api.medianfi.com/api/v1
  • URL: https://api.medianfi.com/api/v1/auth/otp/start
  • Auth: none required

Headers

X-Median-App-Surface'qa'

Bundle marker selecting the temporary /qa onboarding surface. Optional on this promoted deployment (ONBOARDING_V3_QA_ONLY=false): unmarked requests are served, and a qa value is accepted and ignored. Still required on any deployment running ONBOARDING_V3_QA_ONLY=true, where an unmarked request receives the hidden-resource 404. On neither setting is it a tenant authorization credential.

Request body

emailstring email required
purpose'signup' | 'signin' required
fullNamestring
recaptchaTokenstring required

Response

Request accepted; signup may explicitly report an existing account

successtrue required

Changes

No recorded changes to this operation across all 1 revision of this API.