Skip to main content
POST
Exchange an auth intent for tokens
Completes Link authentication. The resulting access token is stored server-side and never reaches the browser. A link_not_found means the email has no Link account yet — register the buyer and retry. Returns 204 with no body. Read Get the session’s Stripe login state to confirm the buyer is authenticated.

Authorizations

x-calm-publishable-key
string
header
required

Publishable key identifying the calling app.

Body

application/json
auth_intent_id
string
required
Minimum string length: 1
wallet
string
required
Pattern: ^0x[a-fA-F0-9]{40}$

Response

Tokens stored.