Skip to content

The v1 docs follow nauthera-server's main branch and its 0.x releases on the way to 1.0, so fields and APIs can still change.

v1

invalid_verification_link

Docs version v1 (main)Nauthera is pre-1.0, in a design-partner program

The email-verification link is unknown, expired, used or no longer matches (400).

Meaning

POST /v1/auth/verify-email/confirm refuses a token that expired (auth.email_verification.validity), was already used, belongs to another organization, was never issued, or was sent to an address the account no longer holds.

Impact

The address is not verified by this link. It is expected for an old email, a link clicked twice, or an address changed after the link was sent.

Diagnosis

Look the request id up on the Troubleshooting page. The refusal is recorded as auth.email_verification.completed with reason invalid_token and cause verification_link_unknown.

Mitigation

  • As a user: ask for a new link (POST /v1/auth/verify-email/resend, offered by the sign-in page) and use the newest email.
  • As an operator: lengthen auth.email_verification.validity if links expire before users reach them.

Escalation

Escalate when a fresh link to the current address is refused. Open an issue with the request id and the server version. Never attach the link or its token.

Problem code runbooks · Generated from internal/runbook/problems.yaml in nauthera-server.