Verify email + set the login password (mailbox owner)
Public token route (token in path). The mailbox owner sets the login password here, atomically with marking the account verified — overwriting any register-time provisional password. On success sets the session cookie and logs the user in.
Parameters
Section titled “Parameters”Path Parameters
Section titled “Path Parameters”token
required
string
Email-verification token from the emailed link
Request Bodyrequired
Section titled “Request Bodyrequired”Media typeapplication/json
object
password
required
string
Examplegenerated
{ "password": "example"}Responses
Section titled “Responses”Verified & logged in; Set-Cookie trackly_session
Media typeapplication/json
object
ok
boolean
Password too short
Media typeapplication/json
object
error
required
Human-readable error message.
string
message
string
Examplegenerated
{ "error": "example", "message": "example"}Token invalid/expired/used
Media typeapplication/json
object
error
required
Human-readable error message.
string
message
string
Examplegenerated
{ "error": "example", "message": "example"}Session secret not configured
Media typeapplication/json
object
error
required
Human-readable error message.
string
message
string
Examplegenerated
{ "error": "example", "message": "example"}