User-facing verification page

Server-rendered HTML page where the user types the short user_code shown by the CLI. When called with ?user_code=... and a valid session, resolves to a consent panel; otherwise shows the entry form or redirects to /auth/login with a returnTo that preserves the code.

GET/activate

Authorization

better-auth.session_token<token>

Cookie session from Better Auth. Requires X-Org-Id header for org-scoped routes.

In: cookie

Query Parameters

user_code?string

Match^[BCDFGHJKLMNPQRSTVWXZbcdfghjklmnpqrstvwxz-]{8,9}$

curl -X GET "https://your-instance/activate"

Empty

"string"

"string"

{
  "type": "https://docs.appstrate.dev/errors/rate-limited",
  "title": "Rate Limited",
  "status": 429,
  "detail": "Too many requests. Please try again shortly.",
  "code": "rate_limited",
  "request_id": "req_abc123",
  "retry_after": 30
}