Skip to main content
POST
https://authproxy.turnkey.com/v1/otp_verify_v2
​
X-Auth-Proxy-Config-Id
string
required
Your Auth Proxy config ID, found in Dashboard → AUTH. See Auth Proxy reference for setup.
​
otpId
string
required
ID representing the result of an init OTP activity.
​
encryptedOtpBundle
string
required
Encrypted bundle containing the OTP code and a client-generated public key. Turnkey’s secure enclaves will decrypt this bundle, verify the OTP code, and issue a new Verification Token. Encrypted using the target encryption key provided in the INIT_OTP activity result.
A successful response returns the following fields:
​
verificationToken
string
required
Verification Token containing a unique id, expiry, verification type, contact signed by Turnkey’s enclaves. Verification status of a user is updated when the token is consumed (in OTP_LOGIN requests)
curl --request POST \
  --url https://authproxy.turnkey.com/v1/otp_verify_v2 \
  --header 'Accept: application/json' \
  --header 'Content-Type: application/json' \
  --header "X-Auth-Proxy-Config-Id: <string> (see Authorizations)" \
  --data '{
    "otpId": "<string>",
    "encryptedOtpBundle": "<string>"
}'

{
  "verificationToken": "<string>"
}