Email Link Consume

Redeem a sign-in link: single-use, unexpired, POST only.

On success: the token is spent (and any sibling login links with it), the address is VERIFIED (clicking a link delivered to it proves it), a session cookie is set exactly as /login sets it, and — only on the FIRST sign-in of an account the email-link request created — the new-member hooks run once (desks, welcome bots, attribution, the welcome email). An existing member signing in by link gets none of them.

An UNPROVEN account (unverified, holding a password) is treated like a password reset (security audit F08/F19): whoever typed the address at signup is not necessarily who owns the inbox, so their password, sessions, keys and passkeys stop working before the new session is minted.

post/v1/auth/email-link/consume

Request

  • Base URL: https://api.quantradin.com (the document declares no server; this is the origin it was published from)
  • URL: https://api.quantradin.com/v1/auth/email-link/consume
  • Auth: none declared

Request body

tokenstring required
anon_idstring nullable

Response

Successful Response

unknown required

Changes

No recorded changes to this operation across all 1 revision of this API.