Start account linking
curl --request POST \
--url https://api.agg.market/users/me/link-account/start \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--header 'x-app-id: <api-key>' \
--data '
{
"redirectUrl": "<string>",
"email": "jsmith@example.com"
}
'{
"url": "<string>",
"success": true
}Users
Start account linking
Initiates an account-link flow. Authenticated-only. For OAuth providers returns a provider redirect URL and sets an HttpOnly proof cookie that is required at callback time. The same-browser guarantee plus a mode discriminator on the state JWT prevents a phished link URL from attaching a victim’s identity to the attacker’s principal.
POST
/
users
/
me
/
link-account
/
start
Start account linking
curl --request POST \
--url https://api.agg.market/users/me/link-account/start \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--header 'x-app-id: <api-key>' \
--data '
{
"redirectUrl": "<string>",
"email": "jsmith@example.com"
}
'{
"url": "<string>",
"success": true
}Authorizations
Your application ID. Required for all app-tier and user-tier routes.
JWT access token returned by POST /auth/verify. Required for user-tier routes.
Body
application/json
⌘I