Chelabase
Login apiLogin

Verify Email

POST
/auth/v1/verify-email

Checks the emailed code. Reads the HttpOnly step cookie and clears it once the email is verified. An open sign-up joins its tenant now, as a person waiting for approval. The answer is a sign-in's: studio sets the HttpOnly session cookie, pending sets none. If sign-up closed since the account was made, the answer is sign_up_closed and the account is deleted. A retry after a failure past the code finishes with the same code.

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

code*string

Response Body

application/json

application/json

application/json

application/json

application/json

application/json

application/json

application/json

application/json

application/json

curl -X POST "https://example.com/auth/v1/verify-email" \  -H "Content-Type: application/json" \  -d '{    "code": "string"  }'
{  "next": "studio"}

Mint Member Token POST

Mints a member access token from the HttpOnly session cookie, after checking that the identity session is live and younger than 30 days and that the membership is active. Takes no body. Studio must send `Origin` and `X-Chelabase-Studio: 1`. Never cached.

App Change Email POST

Changes the signed-in user's email (needs the `Chelabase-User` token). With verification on, a code is emailed and the email is unverified until `verify-email`.