Auth

Confirm a hosted email code

Same-origin hosted form/JSON ceremony. Resolves project, user, host, and return target from the challenge; caller-selected email, project, user, or redirect fields are rejected. Success sets the existing opaque host-only session cookie and returns 303 for forms or JSON for fetch clients.

post/auth/email-code/confirm

Request

  • Base URL: https://api.run402.com
  • URL: https://api.run402.com/auth/email-code/confirm
  • Auth: none declared

Request body

challenge_idstring uuid required
codestring required

Response

JSON success with redirect_to and Set-Cookie.

oktrue required
redirect_tostring required

Changes

No recorded changes to this operation across all 1 revision of this API.