Skip to main content
POST

Body

application/json

Unified verification request for both OTP and passkey authentication.

Use the method field to specify which authentication method is being verified:

  • For OTP: Include challengeId and code
  • For passkey: Include assertion.
method
enum<string>
required

The authentication method being verified.

Available options:
otp
challengeId
string
required

The challenge ID to verify.

code
string
required

The one-time passcode used to verify the authentication challenge.

Required string length: 6
Pattern: ^[0-9]{6}$

Response

Ok. The operation succeeded.

The JSON representation of issued authentication tokens as the result of a successful authentication challenge or the exchange of a refresh token.

authToken
string<jwt>
required

A bearer token representing an authenticated user.

refreshToken
string<jwt>
required

An offline refresh token. Refresh tokens are exchanged for a new authentication token without going through a challenge workflow.