Confirm an email change (dashboard session only)
Session only and cross-origin protected. Send the token in the JSON POST BODY, never the URL query; the emailed link carries it in the URL fragment, which browsers do not transmit. The live session must belong to the SAME account the token is bound to (not necessarily the browser that began the change); the token is single-use and expires after 30 minutes, and the account must still carry the address it had when the change was requested. The account update, the single-use burn, the end of every browser session on the account and the burn of unconsumed sign-in links for the PREVIOUS address all happen in one SQL statement, so an invalid, replayed or conflicting confirmation changes none of them. Because every session ends, the buyer is signed out and must sign in again with the new address; API keys are left alone. On success the previous inbox is notified, with no link and no token. The committed email is best-effort mirrored onto the account's Stripe customer; that outcome is reported as billing_email_sync and never rolls the change back. NOT available to API keys (403 dashboard_only).
Request
- Base URL: https://api.placementapi.com
- URL: https://api.placementapi.com/v1/customers/me/email/confirm
- Auth: HTTP bearer
Request body
Response
OK
Changes
No recorded changes to this operation across all 1 revision of this API.