Skip to main content

Confirm email verification

POST 
/auth/verify-email/confirm

Verify the user's email using a token you collected yourself. IMPORTANT: the emailed verification LINK verifies the address server-side on click and then redirects to redirect_url. So if you take the token off that redirect and post it here, it is already redeemed — and this endpoint treats that as an idempotent success (200 with already_verified: true), not an error. Only a genuinely invalid / expired / unknown token returns 400. send / confirm / resend are NOT a mandatory matched set — confirm is for flows where you collect the token directly rather than landing the hosted redirect. Recommended pattern for the redirect landing: call confirm, ignore its result, then read the user's verified state back and report that — correct whether or not the link already consumed the token.

Request​

Responses​

Email verified — or already verified (the link consumed the token on click). Response carries already_verified (true when this confirm found the address already verified).