Verify MFA verification code

POST /api/experience/verification/mfa-verification-code/verify

Verify the provided MFA verification code. The verification code must have been sent using the MFA verification code endpoint. This endpoint verifies the code against the user's bound identifier and marks the verification as complete if successful.

application/json

Body Required

  • verificationId string Required

    The verification ID returned from the MFA verification code send endpoint.

  • code string Required

    The verification code received by the user.

  • identifierType string Required

    The type of identifier used for MFA verification. Must match the type used when sending the verification code.

    Values are email, phone, Email, or Phone.

Responses

  • 200 application/json

    The MFA verification code was successfully verified.

    Hide response attribute Show response attribute object
    • verificationId string Required

      The unique ID of the verification record. This can be used for subsequent MFA operations.
  • 400

    Bad request. The verification code is invalid, expired, or the user is not identified.

  • 404

    Verification record not found.

  • 501

    The connector for the verification method is not configured.

POST /api/experience/verification/mfa-verification-code/verify 
curl \
 --request POST 'https://[tenant_id].logto.app/api/experience/verification/mfa-verification-code/verify' \
 --header "Content-Type: application/json" \
 --data '{"verificationId":"string","code":"string","identifierType":"email"}'
Request examples 
{
  "verificationId": "string",
  "code": "string",
  "identifierType": "email"
}
Response examples (200) 
{
  "verificationId": "string"
}