Confirm the enrollment of a supported authentication method.

Confirm the enrollment of a supported authentication method.

POST https://{host}/me/v1/authentication-methods/{authentication_method_id}/verify

cURL

phone

curl --request POST \
  --url https://{host}/me/v1/authentication-methods/{authentication_method_id}/verify \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "auth_session": "Fe26.2**05c400ed...",
  "otp_code": "123456"
}
'

201

phone

{
  "id": "phone|dev_XXXXXXXXXXXXXXXX",
  "type": "phone",
  "confirmed": true,
  "phone_number": "[phone]",
  "preferred_authentication_method": "sms",
  "usage": [
    "secondary"
  ],
  "created_at": "2025-01-15T10:30:00.000Z"
}

Authorizations

Authorization · string · header · required

Bearer and DPoP tokens are supported depending on the API configuration

Path Parameters

authentication_method_id · string · required

Authentication Method ID. This value is part of the Location header returned when creating an authentication method. It should be used as it is, without any modifications.

Body

application/json

Passkey verification payload

Password verification payload

WebAuthn Platform verification payload

WebAuthn Roaming verification payload

Push Notification verification payload

Recovery Code verification payload

Email verification payload

Phone verification payload

TOTP verification payload

Request content for verifying an authentication method

auth_session · string · required

The unique session identifier for the enrollment as returned by POST /authentication-methods

authn_response · object · required

Show child attributes

Response

201

application/json

Authentication method verified

password

passkey

recovery-code

push-notification

totp

webauthn-platform

webauthn-roaming

phone

email

id · string · required

The unique identifier of the authentication method

created_at · string<date-time> · required

The date and time when the authentication method was created

usage · enum<string>[] · required

Primary and/or secondary factor

Usage type for authentication factors

Available options: primary, secondary

type · string · default: password · required

Authentication method type (factor)

Allowed value: "password"

identity_user_id · string · required

The ID of the user identity linked with the authentication method

last_password_reset · string<date-time>

The date of the last password reset