---
title: "Check Short Code"
method: POST
path: "/v2/oauth/checkshortcode"
tags: ["OAuth2"]
---

# Check Short Code

`POST /v2/oauth/checkshortcode`

Check the status of a short code that was generated, retrieving auth credentials if it's been redeemed and device_id matches

## Request body

- CheckShortCodeRequest — Details about a short code login request to check
  - `device_id` string, required — The device_id returned from the creation of a short code
  - `code` string, required — The short code

## Response `200`

Success

- AuthFullTokenResponse — A full token response including refresh and access tokens
  - `refresh_token` string, required — The refresh token which can be used to retrieve new access tokens
  - `access_token` string, required — The access token which is used as a bearer token in the Authorization header
  - `access_token_expires_at` string, date-time, required — The date and time when the access token expires and is no longer valid
  - `scopes` string[], required — A list of scopes that this token has access to
  - `users_id` integer, required — The identifier for the user this token is for
  - `apps_id` integer, required — When the token is scoped, the identifier for the app that the token is scoped to
  - `client_id` string, required — The id of the API client this token is issued for
  - `refresh_token_expires_at` string, date-time, required — The date and time when the refresh token is no longer valid.

## Other responses

- `204` — The short code request has not yet been completed by the user
- `400` — The short code request is not valid or has expired

---

[API](https://skmtc.net/sidequestvr/apis/sidequest-api.md) · [All operations](https://skmtc.net/sidequestvr/apis/sidequest-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/sidequestvr/sidequest-api/revisions/170261dc1673/schema)