signup

Preview Verification

Side-effect-free, and a POST so that it cannot be fired by a machine.

Mail scanners and link prefetchers issue GETs on every URL in a message; a verification that completed itself inside a security appliance is one the human never consented to. Making the preview a POST as well is belt and braces — it costs nothing and it means no route reachable from that mail can be triggered without a browser running our code.

Reads through signup.preview_by_token, which deliberately avoids _live: _live derives expiry by stamping the row and flushing, and then returns the row it just expired — so a dead link previews as a live one, and a scanner's fetch writes to the database.

post/signup/verify/preview

Request

  • Base URL: https://app.zeno-works.ch (the document declares no server; this is the origin it was published from)
  • URL: https://app.zeno-works.ch/signup/verify/preview
  • Auth: none declared

Request body

tokenstring required

Response

Successful Response

emailstring required
client_namestring required
account_existsboolean required
grants_keyboolean required
expires_atstring date-time required

Changes

No recorded changes to this operation across all 1 revision of this API.