Request a change of the authenticated identity's email address
POST
/current-identity-email
email-password auth method. The caller must already be authenticated with a JWT — the identity to update is taken from the authenticated session (identity_id), not from the request body.email-password auth method for the caller is located, new_email is checked against all existing email-password auth records to ensure no other account already uses it, and a pending_auth_id of new_email is staged on the auth record. A single-use, 6-digit email-change-otp code is then generated (expiring after 5 minutes) and emailed to the new address — the change only takes effect once that code is confirmed via the email-verification flow; this endpoint does not itself flip the email over.EMAIL_CHANGE_OTP_COOLDOWN_MS), based on the most recently issued email-change-otp token. The response is intentionally minimal ({ "pending": true }) and never returns the raw OTP.Request
Body Params application/jsonRequired
Responses
Request Request Example
Shell
JavaScript
Java
Swift
curl --location '/current-identity-email' \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data-raw '{
"new_email": "new.address@acmecorp.ng"
}'Response Response Example
200 - Success
{
"message": "Request successful",
"status": "success",
"data": {
"pending": true
}
}Modified at 2026-09-30 00:29:45