Mutations

Confirm an email address (consume the verification token)

Magic-link branch: submit the token as application/x-www-form-urlencoded (field token). On success the single-use token is consumed, the user is marked verified, a session is minted, and the response is a 303 redirect to /account/ with Set-Cookie. A dormant legacy branch accepts application/json { "code": "..." } with an authenticated session cookie and returns { "ok": true }. Rate limited (20 form attempts / 15 min per IP).

post/api/auth/verify-email

Request

  • Base URL: https://rrmacademy.org
  • URL: https://rrmacademy.org/api/auth/verify-email
  • Auth: none required

Request body

codestring required

Legacy typed verification code (dormant fallback; requires an authenticated session).

Response

Legacy JSON branch succeeded, or the link was already used.

oktrue required

Changes

No recorded changes to this operation across all 1 revision of this API.