Lookup Businesses By Email
Look up businesses associated with an email address.
This endpoint supports the email-first login flow where users enter their email, then select from their associated businesses before entering password.
Security measures:
- Returns empty list for non-existent emails (prevents enumeration)
- Rate limited to 10 requests per minute per IP
- Timing-safe responses to prevent timing-based enumeration
Traces to: FR-LOGIN-003, ADR-AUTH-LOGIN-001, TDD-AUTH-LOGIN-UI-001
Args: request: Business lookup request with email http_request: HTTP request object (for rate limiting) db: Database session
Returns: List of businesses associated with the email (empty if not found)
Raises: 429: Rate limit exceeded
Request Body required
Section titled “Request Body required ”Request schema for looking up businesses by email.
object
Email address to look up
Responses
Section titled “ Responses ”Successful Response
Response schema for business lookup.
Returns empty list for non-existent emails (prevents enumeration).
object
Businesses associated with email (empty if not found)
Business information in lookup responses.
object
Business UUID
Business display name
Validation Error
object
object
object
Too Many Requests
Error response.
object
Error code
Error message