Record where the caller's account came from
Full sessions only. The login app posts the first-touch sign-up source once, right after a new account's first session. The first post within a day of the account's creation is kept; later posts and posts for older accounts are ignored. Values that aren't plain campaign tags, known tool names, a hostname or a path are dropped: a referrer is cut to its host and a landing page to the first two segments of its path, so nothing that identifies a person and no capability link is stored. The body is limited to 4 KB.
View as MarkdownAuthorization
bearer In: header
Request Body
application/json
TypeScript Definitions
Use the request body type in TypeScript.
A first-touch sign-up source. Every field is optional; empty or invalid values are stored as empty.
Response Body
application/json
application/json
application/json
curl -X POST "https://example.com/v1/me/attribution" \ -H "Content-Type: application/json" \ -d '{}'Resend the email confirmation link
Full sessions only. No-ops with a 200 if the account is already verified, or if a still-usable link was sent within the last minute (throttled so this can't be used to mail-bomb an inbox).
Active sessions
Full sessions only. Unrevoked, unexpired refresh-token sessions, newest first.