Confirm a guest comment code

POST

/v1/data/{artifactId}/comments/_guest/verify

curl --request POST \
  --url https://shareout.site/v1/data/example/comments/_guest/verify \
  --header 'Content-Type: application/json' \
  --data '{ "name": "example", "email": "hello@example.com", "code": "example" }'

• Production

Exchanges the code for shareout_guest_{artifactId}: an HttpOnly, SameSite=Strict cookie (12 h) holding an HMAC over the artifact id, the name and a keyed email hash, valid for this artifact only. Guests then post and reply through POST …/comments (authorType: guest); they cannot resolve, assign, react or approve. Five wrong tries burn a code.

Parameters

Path Parameters

artifactId

required

string

Artifact ID (e.g. art_abc123).

Request Body^required

Media typeapplication/json

object

name

required

string

<= 80 characters

email

required

string format: email

code

required

string

/^[0-9]{6}$/

Example^generated

{
  "name": "example",
  "email": "hello@example.com",
  "code": "example"
}

Responses

200

{ success: true, data: { guest: { name }, expiresIn } } plus Set-Cookie

400

INVALID_CODE or VALIDATION_ERROR

403

GUEST_COMMENTS_DISABLED, or FORBIDDEN (Origin)

429

RATE_LIMIT_EXCEEDED