POST
/
verify
/
email-magic-link
/
finalize

Body

application/json
challengeId
string
required

The ID obtained when starting the challenge.

Response

200 - application/json
accessToken
string

A new short-term token with scopes to manage authenticators (e.g. add secondary authenticators, remove authenticators, view or regenerate recovery codes). Only present if the challenge succeeded.

isVerified
boolean

True if the email magic link was clicked by the user.