Skip to main content
POST
Verify an authentication attempt

Path Parameters

id
string
required

The attemptId returned when the attempt started.

Required string length: 1 - 64

Body

application/json
code
string
required

Verification code from the email.

Pattern: ^[0-9]{6}$
Example:

"123456"

codeVerifier
string
required

The random secret whose SHA-256 hash was sent as codeChallenge.

Pattern: ^[A-Za-z0-9._~-]{43,128}$
Example:

"dBjftJeZ4CVP-mB92K27uhbUJU1p1r_wW1gFWFOEjXk"

Response

OK. The attempt is consumed and the key is issued.

userId
string
required
Example:

"user_2abc9xyz"

credential
object
required
Last modified on November 10, 2026