Skip to main content
POST
/
v1
/
session
/
otp
/
check
Check standalone OTP
curl --request POST \
  --url https://{appId}.session.prelude.dev/v1/session/otp/check \
  --header 'Content-Type: application/json' \
  --cookie __verification-login_%7Bapp_id%7D= \
  --data '
{
  "code": "<string>",
  "challenge_token": "<string>"
}
'
{
  "challenge_token": "<string>"
}

Authorizations

​
__verification-login_{app_id}
string
cookie
required

Body

application/json
​
code
string
required

The OTP code to verify.

Example:

"123456"

​
challenge_token
string

The challenge token (required for step-up flow).

Example:

"eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9..."

Response

OK

​
challenge_token
string
required

A new challenge token to use for the next step or to finalize login.

Example:

"eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9..."