Skip to content
SupaCloud Docs
Select themeSelect language

GET /api/auth/magic/pending - the waiting window's view of its own request. Never a hash, never a code; `unknown` for a browser without a request.

GET
/api/auth/magic/pending
curl --request GET \
  --url https://example.com/api/auth/magic/pending

Responses

Section titled “Responses”

200

Section titled “200”

State of the magic-link request bound to this browser

Media typeapplication/json

What the waiting window may learn about its own request.

object
code_expires_at

When the device code stops being accepted; only while code_required.

string | null format: date-time
status
required

pending | code_required | completed | expired | invalidated | unknown (this browser holds no request the server knows).

string
Examplegenerated
{
  "code_expires_at": "2026-04-15T12:00:00Z",
  "status": "example"
}

500

Section titled “500”

Structured server error

Media typeapplication/json

The canonical JSON body of every error response — the single source of truth the frontend binds to. Every AppError serializes as this exact shape, and the generated OpenAPI component ApiErrorBody (with its ErrorCode enum) is what the frontend error schema is generated from, so there is no hand-written error schema on either end.

object
code
required

Machine-readable, stable error code.

string
Allowed values: not_found unauthorized forbidden license_required license_expired bad_request unprocessable precondition_failed conflict method_not_allowed rate_limited too_many_requests quota_exceeded database_error docker_error vault_error internal_error
details
One of:
null
error
required

Human-readable message (the server’s English text; the client may localize by code).

string
Example
{
  "code": "not_found"
}