API referenceAccount
`POST /account/setup-token-lookups` — which half of a set-up link is left.
POST
/account/setup-token-lookupsUnauthenticated; the token in the body is the gate, checked exactly as
POST /account/passwords checks it, and every refusal is the same 403. The
set-up pages call it on load so a link opened a second time goes to the
step it is still good for instead of offering the password form again.
A POST because the token is a credential and must not ride a query string.
Request Body
application/json
TypeScript Definitions
Use the request body type in TypeScript.
POST /account/setup-token-lookups body: the emailed set-up token.
Response Body
application/json
curl -X POST "https://example.com/account/setup-token-lookups" \ -H "Content-Type: application/json" \ -d '{ "token": "string" }'{ "email": "string", "step": "set_password"}