Verify OTP and login

POST

/api/v1/auth/verify-otp

auth

Last modified:2026-06-04 22:55:16

Verifies the OTP sent to the email. On success, links the email to the device, upgrades the user role to authenticated_user, and returns access + refresh tokens.

Success: 200 - data contains access_token, refresh_token, access_token_expires_in, refresh_token_expires_in (epoch seconds), is_onboarded (bool - route to onboarding if false), name, email.

Errors: 422 - OTP expired or invalid | 401 - device not registered

Request

Body Params application/jsonRequired

Example

{
    "device_id": "device_a1b2c3d4e5",
    "email": "user@example.com",
    "otp": "482910"
}

Request Code Samples

Shell

JavaScript

Java

Swift

PHP

Python

HTTP

Objective-C

Ruby

OCaml

Dart

curl --location '/api/v1/auth/verify-otp' \
--header 'Content-Type: application/json' \
--data-raw '{
    "device_id": "device_a1b2c3d4e5",
    "email": "user@example.com",
    "otp": "482910"
}'

Responses

🟢200OK

application/json

Successful Response

Bodyapplication/json

Example

{
    "success": true,
    "message": "Login successful",
    "data": {
        "access_token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJlbWFpbCI6InVzZXJAZXhhbXBsZS5jb20iLCJyb2xlIjoiYXV0aGVudGljYXRlZF91c2VyIiwidHlwZSI6InVzZXJfYXV0aF90b2tlbiIsImV4cCI6MTc0Njk2NTQwMH0.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c",
        "refresh_token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJlbWFpbCI6InVzZXJAZXhhbXBsZS5jb20iLCJyb2xlIjoiYXV0aGVudGljYXRlZF91c2VyIiwidHlwZSI6InVzZXJfcmVmcmVzaF90b2tlbiIsImV4cCI6MTc1MzY1NzgwMH0.abc123def456ghi789",
        "access_token_expires_in": 1746965400,
        "refresh_token_expires_in": 1753657800,
        "is_onboarded": false,
        "name": "Priyatosh Ghosh",
        "email": "user@example.com"
    }
}

🟠401Unauthorized

🟠422Parameter Error

🟠429

Modified at 2026-06-04 22:55:16

Send OTP

Resend OTP