Verify Email
const url = 'https://example.com/auth/verify-email/';const options = { method: 'POST', headers: {'Content-Type': 'application/json'}, body: '{"token":"example"}'};
try { const response = await fetch(url, options); const data = await response.json(); console.log(data);} catch (error) { console.error(error);}curl --request POST \ --url https://example.com/auth/verify-email/ \ --header 'Content-Type: application/json' \ --data '{ "token": "example" }'Redeem a verification token to activate the account.
SIGNUP-03: a valid single-use expiring token flips email_verified=True, is_active=True, and status=“active” so the user can log in via the existing auth gate in dependencies.py.
Expired, unknown, and already-consumed tokens all return the same “Invalid or expired” error (enumeration-safe, SIGNUP-05 / T-1231-06).
Request Body required
Section titled “Request Body required ”object
Raw opaque verification token from the email link
Example generated
{ "token": "example"}Responses
Section titled “ Responses ”Successful Response
Bad request — invalid query parameters or payload
Unauthorized — missing or invalid credentials
Forbidden — caller lacks access to this resource
Not found
Validation error
Too many requests — retry after the advertised interval
Headers
Section titled “Headers ”Seconds until the request may be retried
Internal server error
Service unavailable — the database could not serve the request