POST /auth/register/email-code

Complete passwordless registration using an email verification code and automatically log in, creating a password-exempt user. The verification code must be obtained by calling the send verification code endpoint before registration. References: OWASP ASVS V2.2.

Request Body

Schema: dto.RegisterByEmailCodeRequest

Field	Type	Required	Example	Constraints	Description
code	string	Yes
email	string	Yes
tenant_id	string	No
username	string	No

Responses

Status	Description	Schema
200	Registration successful and automatically logged in, returns JWT token	dto.LoginByCodeResponse
400	Invalid request parameters or incorrect verification code	gitee_com_linmes_authms_base_dto.SimpleResponse
500	Internal server error	gitee_com_linmes_authms_base_dto.SimpleResponse

Referenced Schemas

dto.LoginByCodeResponse

Field	Type	Required	Example	Constraints	Description
access_token	string	No
expires_in	integer	No
is_new_user	boolean	No
refresh_token	string	No
token_type	string	No
user	dto.UserInfo	No
user_id	string	No			User ID (redundant with User.ID for flat access)

dto.UserInfo

User basic information

Field	Type	Required	Example	Constraints	Description
created_at	string	No	2026-01-15T10:30:00Z		Account creation time
email	string	No	john@example.com		Email
id	string	No	usr_abc123		User ID
must_change_password	boolean	No	False		Password must be changed
password_expires_in	integer	No	30		Days until password expires
password_warning	string	No	expiring		Password warning: expiring/expired_grace/expired
phone	string	No	13800138000		Phone
status	string	No	active		Status
username	string	No	john.doe		Username

gitee_com_linmes_authms_base_dto.SimpleResponse

Field	Type	Required	Example	Constraints	Description
code	integer	No
message	string	No
timestamp	string	No