POST/api/public/access-request/email/start-verification

Sends a 6-digit confirmation code, valid for 10 minutes, to the given email address — first step before an access request.

Auth & Security

No authentication required

strictLimiter: 10 requests / 15 minutes, IP-bound.

Rate Limit: 10 Anfragen pro 15 Minuten (IP-basiert)

Idempotent: No

Parameters

email(body, string, required)— Email address to be verified

Example Request

{"email":"max@example.com"}

Example Response

{"ok":true,"verification_id":"<UUID>","expires_in_minutes":10,"resend_cooldown_seconds":60}

Error Codes

429 RATE_LIMIT_EXCEEDED — Too many requests to this sensitive endpoint.
502 MAIL_NOT_SENT — The confirmation code could not be sent (email delivery error).

Live Test Proof

Success (200, real verification_id) verified live; the corresponding email was received via an own fake SMTP server, the 6-digit code was taken from the actual email content. Negative case 429 observed after repeated calls.

← Public Forms