Validate Verification Token
GET/identity/v2/auth/email/token/validate
Performs a read-only validity check on an email verification / reset link token for a given token type. It returns only whether the link is still valid (exists, matches the requested type, has not been used, and has not expired). This endpoint never consumes the token or extends its lifetime; the corresponding verify/reset APIs still perform the authoritative validation. It is intended to let a client detect an expired or invalid link before the user submits any payload (for example, a new password or PIN).
Request
Responses
- 200
- 400
- 403
- 429
OK: The request was successful.
Bad Request - the request is malformed or invalid.
Forbidden - the client is not allowed to access this resource.
Too Many Requests: The client has sent too many requests in a given amount of time.
Response Headers
Refill rate of the bucket that rejected this request: requests per second for the tenant bucket, or requests per refill window (60 seconds by default) for the per-IP bucket.
100Tokens left in that bucket.
0Unix timestamp, in seconds, at which the next token becomes available. This is the earliest time a retry can succeed.
1757942400