Consume a magic-link token
Verify
Consume a magic-link token
Public, unauthenticated endpoint that consumes a single-use magic-link token emitted by POST /verify/send with channel: "magic_link". Validates the HMAC + expiry in constant time, then approves the underlying verification row by replaying the embedded OTP code through VerifyService.checkVerification. Single-use, brute-force lockout, and PSD2 SCA binding are enforced by the same row-state machine every other Verify channel uses.
GET
Consume a magic-link token
Authorizations
Dashboard JWT token from Clerk
Response
200
Default Response