It's just an update to the account after all.
The only special thing about it is the authorization - it requires a special token.
if (body.verified && tokenData.meta.name !== Token.VerifyAccount.meta.name) {
logger.warn({ account, tokenData }, 'User tried to verify email with incorrect token type.')
throw new Unauthorized()
}
It can be done in different steps to avoid breaking anything:
- Add functionality to PATCH /accounts
- Make changes in Explorer
- Remove deprecated endpoint