Skip to main content

Confirm email verification

POST 
/auth/verify-email/confirm

Verify the user's email using the token from the emailed link. Zyphr does NOT host auth pages and never redeems the token itself. The emailed link points at YOUR redirect_url with ?token=<raw>; your app reads that token and posts it here. Nothing is verified until this call. This endpoint is idempotent: re-posting an already-redeemed token returns 200 with already_verified: true rather than an error, so a double submit or a link opened twice is safe. Only a genuinely invalid / expired / unknown token returns 400. Note redirect_url is REQUIRED (snake_case) when sending the verification email — there is no hosted fallback page.

Request​

Responses​

Email verified — or already verified (the link consumed the token on click). Response carries already_verified (true when this confirm found the address already verified).