Send a code to the email an invitation names.
curl --request POST \ --url https://auth.example.com/api/v1/invitations/email-verification/send \ --header 'Content-Type: application/json' \ --data '{ "token": "example" }'Sends a one-time code to the invited email of an active invitation (never to an address the request gives), so a passkey or authenticator-app signup can prove it controls that email when the tenant requires it (authentication-methods.invitation.email_verification). Limited per invitation like other email sends.
Request Body required
Section titled “Request Body required ”object
Example generated
{ "token": "example"}Responses
Section titled “ Responses ”The code was sent.
object
Example
{ "expires_in": 600, "masked_email": "i***@example.com"}Error response.
object
Optional browser-side WebAuthn Signal API hint. When unknown_credential is true, clients that just received a WebAuthn credential assertion may call PublicKeyCredential.signalUnknownCredential() for that credential ID.
object
Example generated
{ "error": "example", "error_description": "example", "message": "example", "webauthn_signal": { "unknown_credential": true }}Error response.
object
Optional browser-side WebAuthn Signal API hint. When unknown_credential is true, clients that just received a WebAuthn credential assertion may call PublicKeyCredential.signalUnknownCredential() for that credential ID.
object
Example generated
{ "error": "example", "error_description": "example", "message": "example", "webauthn_signal": { "unknown_credential": true }}