QUquivaworks
Client Access

Sign in with a magic link or code

Changed on

Signs a client in with a single-use magic-link token, or with the 6-digit code together with email and account. Repeated wrong codes lock the sign-in until an admin clears it (see /accounts/clear-client-signin-lock).

post/accounts/auth-with-magic-link

Request

Request body

tokenstring

Single-use token from the link

codestring

6-digit code from the invitation email

emailstring

Email address of the client user

accountstring

Account name; required with code

Response

Success

refresh_tokenstring

Refresh token

auth_tokenstring

Authentication token (JWT)

passkey_enabledboolean
totp_enabledboolean
first_sign_inboolean

True on the first sign-in after an invitation; the app routes it to MFA setup

userstring email

User email

user_idstring
first_namestring
last_namestring
rolestring

Role on the signed-in account

themestring
soundboolean
advanced_modeboolean
voice_transcriptionboolean
onboarding_progressobject
timezonestring
notification_preferencesobject
folderstring

Set for client users filed under a folder

device_tokenstring

Present when remember_device was set on an MFA step. Send it as device_token on later password sign-ins.

Changes