Cancel email change (old-address link)
POST
/v1/auth/cancel-email-change
The account owner's kill switch: post the token from the cancel link in the alert sent to the CURRENT address to abort a pending email change you didn't start. The response is the same shape whether or not a change was pending, so it can't be used to probe account state.
Request Body
application/json
Email-change cancel payload (POST /auth/cancel-email-change, #2125) — the single-use token from the old-address cancel link.
The single-use token from the "this wasn't me" cancel link.
Responses
OK
application/json
Email-change cancel result (POST /auth/cancel-email-change + POST /me/change-email/cancel, #2125).
true when a pending change was cancelled; false when there was nothing to cancel.
A short human-readable outcome for the caller to surface.