Verify a user’s email address using a token from a verification email
mode is "code"). On success, the user’s isVerified field is set to true and the token is invalidated.
This endpoint is unauthenticated — the token itself proves identity.
true when the email was successfully verified.| Code | Status | Description |
|---|---|---|
auth/invalid-or-expired-token | 400 | The token does not exist in Redis — either it was never issued, has expired (5-minute TTL), or has already been used. |