Skip to main content
POST
Verify email with code

Query Parameters

client_type
enum<string>
default:web

Client type determines how refresh tokens are returned:

  • web: Refresh token stored in httpOnly cookie, csrfToken returned in response
  • mobile/desktop/server: refreshToken returned directly in response body
Available options:
web,
mobile,
desktop,
server

Body

application/json
email
string<email>
required

User email address

Example:

"user@example.com"

otp
string
required

6-digit verification code

Pattern: ^\d{6}$
Example:

"123456"

Response

Email verified successfully, session created

user
object
accessToken
string

JWT authentication token

csrfToken
string | null

CSRF token for use with refresh endpoint (web clients only)

refreshToken
string | null

Refresh token for mobile/desktop/server clients (null for web clients)