v1
auth

Apply a volume-knob choice from a Briefing footer link

Apply one footer choice, authorised by the token in the link.

Deliberately not Security(requires_user). The session is the wrong authority here: the settings page applies this on arrival, so a session-authenticated write would let any third party change a logged-in reader's preferences just by getting them to follow a link. The HMAC binds the choice to the recipient we sent it to, exactly as the unsubscribe link does, and works whether or not they happen to be signed in.

post/api/auth/user/preferences/from-email

Query parameters

choicestring required
tokenstring required

Response

Successful Response

user_idstring required
emailstring email required
briefing_frequency'DAILY' | 'WEEKLY' | 'MONTHLY' | 'OFF'
alerts_enabledboolean
store_verdicts_enabledboolean
daily_limitinteger

Changes

Changed in 1 of the 103 revisions of this API.1