API reference / Partner auth

post/v2/auth/magic-link

Email a sign-in link

Operation
requestMagicLink
Authentication
None — public

**Always 202**, whether or not the address belongs to a partner account. Reporting "no such user" would make this an oracle for which airlines and OTAs we work with.

An applicant account and a suspended partner are treated identically to an unknown address: accepted, and no mail sent.

Request

Body

emailstringrequired

Responses

202Accepted. Says nothing about whether the address exists.
statusstringrequired
messagestringrequired
400The request body or query failed validation.
errorobjectrequired
429Too many requests. Five per fifteen minutes per address.
errorobjectrequired

Example

curl
curl -X POST https://api.haavisa.com/v2/auth/magic-link \
  -H "Content-Type: application/json" \
  -d '{
    "email": "<email>"
  }'

More in Partner auth

Something unclear? The eligibility guide explains the model behind the answers; the errors guide covers the envelope.