Confirm a pending email address change

PATCH

/current-identity-email

Completes a self-service email address change for the currently authenticated identity by consuming the one-time email-change-otp code that was sent to the new email address when the change was requested. On success, the identity's email-password auth method is updated to the new address and marked verified, and the identity's primary_email is updated to match.

The code can only be consumed once — a second attempt with the same value fails with a 400. Failed attempts are tracked per auth method; after too many failures within a rolling window, further attempts are blocked with a 429 until the window elapses, regardless of whether the code supplied is actually correct. There must be a pending email change in progress for the identity (i.e. a prior request-email-change flow must have set a pending_auth_id) or this returns a 404.

Request

Authorization

JWT Bearer

Add the parameter

Authorization

to Headers

Example:

Authorization: ********************

Body Params application/jsonRequired

Examples

Responses

🟢200

application/json

The code was valid and unused, and there was a pending email change in progress. The identity's email-password auth method and primary email have been updated to the new address.

Bodyapplication/json

🟠400

🟠401

🟠404

🟠429

Request Example

Shell

JavaScript

Java

Swift

curl --location --request PATCH '/current-identity-email' \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '{
    "code": "482913"
}'

Response Example

200 - Success

{
    "message": "Request successful",
    "status": "success",
    "data": {
        "primary_email": "jane.doe@newdomain.com"
    }
}

Modified at 2026-09-30 00:29:45

Change the authenticated identity's password

Request a change of the authenticated identity's email address