# The new address shown to be theirs

> tidekeeper's API reference: https://tidekeeper.eu/docs/api/post-auth-email-confirm

`POST /api/v1/auth/email/confirm`

The new address shown to be theirs: the change is made, and the old address is told. It signs nobody in: a link to an address is not the password or the second step.

## What to send

`CodeUse`: A link's own token, or the address it went to with its six digits.

- `code` (string or null)
- `email` (string or null)
- `second` (string or null): The second step, when the member has one.
- `token` (string or null)

## The answer

200, `EmailChange`: A new address to sign in with: a link goes to it, and the change is made when it is opened (doc/launch.md, 2.5).

- `email` (string, needed)

## Asking

```sh
curl -X POST https://tidekeeper.eu/api/v1/auth/email/confirm \
    -H "Authorization: Bearer $TIDEKEEPER_TOKEN" \
    -H "Content-Type: application/json" \
    -d '{}'
```