auth

Authenticate by verifying the posession of a one-time token.

post/verify

Request body

type'signup' | 'recovery' | 'invite' | 'magiclink' | 'email_change' | 'sms' | 'phone_change'
tokenstring
emailstring email

Applicable only if type is with regards to an email address.

phonestring phone

Applicable only if type is with regards to an email address.

redirect_tostring uri

(Optional) URL to redirect back into the app on after verification completes successfully. If not specified will use the "Site URL" configuration option. If not allowed per the allow list it will use the "Site URL" configuration option.

Response

An access and refresh token.

access_tokenstring

A valid JWT that will expire in expires_in seconds.

refresh_tokenstring

An opaque string that can be used once to obtain a new access and refresh token.

token_typestring

What type of token this is. Only bearer returned, may change in the future.

expires_ininteger

Number of seconds after which the access_token should be renewed by using the refresh token with the refresh_token grant type.

Changes