---
title: "Verify OTP"
method: POST
path: "/auth/user-auth/verify-otp"
tags: ["auth-userauth"]
---

# Verify OTP

`POST /auth/user-auth/verify-otp`

## Request body

- UserAuthOtpVerificationRequest
  - `authSessionId` string, uuid, required — The log in session ID of the user, valid for the duration of the OTP validity
  - `otp` string, required — The verification code sent to user (partner) email

## Response `200`

Success

- AccessTokenResponse
  - `userId` string, required — Onboard unique User ID
  - `accessToken` Token, required
    - `token` string, required — Token string (Request, Access, Refresh)
    - `expiry` string, date-time, required — Timestamp field.
  - `refreshToken` Token, required
    - `token` string, required — Token string (Request, Access, Refresh)
    - `expiry` string, date-time, required — Timestamp field.

## Other responses

- `400` — Bad request
- `401` — Unauthorized request
- `404` — Not found
- `500` — Server error

---

[API](https://skmtc.net/nestechops/apis/onboard-external-api-gateway.md) · [All operations](https://skmtc.net/nestechops/apis/onboard-external-api-gateway/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/nestechops/onboard-external-api-gateway/revisions/35fe01ca087b/schema)
