Sign in

v47

latestOpenAPI 3.0.3MIT Licenseraw.githubusercontent.com2026-08-015915132.9 KB
user

Verify a challenge on a factor.

post/factors/{factorId}/verify

Path parameters

factorIdstring uuid required

Request body

challenge_idstring uuid required
codestring

Response

This challenge has been verified. Client libraries should replace their stored access and refresh tokens with the ones provided in this response. These new credentials have an increased Authenticator Assurance Level (AAL).

access_tokenstring

A valid JWT that will expire in expires_in seconds.

refresh_tokenstring

An opaque string that can be used once to obtain a new access and refresh token.

token_typestring

What type of token this is. Only bearer returned, may change in the future.

expires_ininteger

Number of seconds after which the access_token should be renewed by using the refresh token with the refresh_token grant type.

expires_atinteger

UNIX timestamp after which the access_token should be renewed by using the refresh token with the refresh_token grant type.