---
title: "SPA portal authentication"
method: POST
path: "/v1/orders/spa-auth"
tags: ["Orders"]
---

# SPA portal authentication

`POST /v1/orders/spa-auth`

Authenticate a provider SPA session by validating the order access code, employee DOB and last name, and reCAPTCHA token. Returns an access token for subsequent SPA requests.

## Request body

- object
  - `orderAccessCode` string, required — The order access code provided to the patient/provider
  - `dob` string, required — Date of birth in YYYY-MM-DD format
  - `lastName` string, required — Employee last name for verification
  - `captchaToken` string, required — reCAPTCHA token for bot protection

## Response `200`

Default Response

- object
  - `accessToken` string, required

## Other responses

- `400` — Default Response
- `404` — Default Response
- `500` — Default Response

---

[API](https://skmtc.net/bluehive-health/apis/bluehive-api.md) · [All operations](https://skmtc.net/bluehive-health/apis/bluehive-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/bluehive-health/bluehive-api/revisions/e6e553c2594a/schema)