Hand a guest over to this browser
POST/guests/handover
Exchanges the one-time code that a link from an email leaves in the address of the Messages page for the credentials of its guest (Better Messages 3.3). The link that confirms an email, a sign-in link and the signed link of a booking each send the browser to the Messages page with bm-guest-handover={guest id}.{code} in the address. The script of the messenger takes it out of the address, sends it here, and keeps the guest in the storage of the browser like any other guest. No cookie is set.
A code works once and for 5 minutes. A wrong code, one used already, an expired one, or one of a guest who no longer exists all get the same 403 with bm_guest_handover_refused, so the answer does not tell which it was. Returns the same answer as /guests/register, with the credentials, emailState and the realtime profile, sent with headers that keep it out of caches. Public endpoint: it takes no guest headers.
Request#
Responses#
- 200
- 403
The guest of the code, with credentials and profile data
The code is wrong, used, expired or of a guest who is gone (bm_guest_handover_refused)