Sign in
oauth

Discover API region from a peppered email hash

Hash-only discovery hop for shared-app login. Clients send HMAC-SHA256 hex of the normalized email. A US reservation returns region=us. A miss returns region=ca. Never send raw email. Does not return a URL.

post/auth/region

Request body

email_hashstring required

HMAC-SHA256 peppered email hash as 64 hex chars. Raw email is rejected.

Response

region for this hash

region'ca' | 'us' required

Changes