Start account linking

POSThttps://api.agg.market/users/me/link-account/start

Initiates an account-link flow. Authenticated-only. For OAuth providers returns a provider redirect URL and sets an HttpOnly proof cookie that is required at callback time. The same-browser guarantee plus a mode discriminator on the state JWT prevents a phished link URL from attaching a victim's identity to the attacker's principal.

Loading code example

Loading code example

Authorizations

appIdstringheaderrequired

API key passed in the header.

Body

provider"google" | "twitter" | "apple" | "email"required

Allowed values: "google" | "twitter" | "apple" | "email"

redirectUrlstring<uri>

emailstring<email>

Length: <= 254

Response

application/json

200

type"redirect" | "magic_link"required

Allowed values: "redirect" | "magic_link"

urlstring

successtrue

Allowed values: true