Verification

Download OpenAPI specification:Download

Verify user data that will enrich their profile

Send email link

Send an email magic link to the given email address. This requires a logged-in user so it must be authorized using a valid user access token returned upon successful authentication

SecurityHTTP: UserAccessToken
Request
Request Body schema: application/json
required
email
required
string

Email to send the magic link to

redirect_uri
required
string

URI where the email link will redirect to. The verification result will be included as a boolean query parameter called result (for example, https://www.example.com/verify?result=true). This URI must also be configured as an allowed redirect URI in the Admin Portal.

object

Texts, logo and color to render email template with

update_primary
boolean
Default: false

Allows the request to update the user's current verified primary email. If the user profile already has a verified primary email, it will override it if true or add it as their secondary email if false

Responses
200
409
post/v1/verification/links/email
Request samples
application/json
{
  • "email": "name@example.com",
  • "email_content": {
    },
  • "update_primary": false
}
Response samples
application/json
{
  • "message": "Verification email sent"
}

Send email OTP

Send a one-time passcode (OTP) by email to the given email address. This requires a logged-in user so it must be authorized using a valid user access token returned upon successful authentication.

SecurityHTTP: UserAccessToken
Request
Request Body schema: application/json
required
email
required
string

Email to send the OTP to

object

Texts, logo and color to render email template with

Responses
200
404
409
post/v1/verification/otp/email/send
Request samples
application/json
{
  • "email": "name@example.com",
  • "email_content": {
    }
}
Response samples
application/json
{
  • "message": "Email sent successfully"
}

Validate email OTP

Validate a one-time passcode (OTP) sent by email. This API is used to verify the email OTP sent to the user. The email will be added to the user profile and marked as verified. The endpoint will not authenticate the user (or create new users), and no tokens are returned.

SecurityHTTP: UserAccessToken
Request
Request Body schema: application/json
required
email
required
string

Email that the OTP was sent to

passcode
required
string

Email code to validate

update_primary
boolean
Default: false

Allows the request to update the user's current verified primary email. If the user profile already has a verified primary email, it will override it if true or add it as their secondary email if false

Responses
200
400
404
409
post/v1/verification/otp/email/validate
Request samples
application/json
{
  • "email": "string",
  • "passcode": "string",
  • "update_primary": false
}
Response samples
application/json
{
  • "result": true
}

Send SMS OTP

Send a one-time passcode (OTP) by SMS to the given phone number. This requires a logged-in user so it must be authorized using a valid user access token returned upon successful authentication

SecurityHTTP: UserAccessToken
Request
Request Body schema: application/json
required
custom_message
string

Message to send, must contain {otp} and {app} placeholders to be replaced with one time password and application name. Limited to 140 characters

sender_id
string

The sender name that appears as the message sender on recipients devices. Limited to 11 characters. Limited support see https://docs.aws.amazon.com/sns/latest/dg/sns-supported-regions-countries.html

phone_number
required
string

Phone number to send the OTP to

Responses
200
404
409
post/v1/verification/otp/sms/send
Request samples
application/json
{
  • "custom_message": "string",
  • "sender_id": "string",
  • "phone_number": "string"
}
Response samples
application/json
{
  • "message": "SMS sent"
}

Validate SMS OTP

Validate a one-time passcode (OTP) sent by SMS. This API is used to verify the SMS OTP sent to the user. The phone number will be added to the user profile and marked as verified. The endpoint will not authenticate the user (or create new users), and no tokens are returned.

SecurityHTTP: UserAccessToken
Request
Request Body schema: application/json
required
phone_number
required
string

Phone number that the SMS OTP was sent to

passcode
required
string

OTP to validate

update_primary
boolean
Default: false

Allows the request to update the user's current verified primary phone number. If the user profile already has a verified primary phone number, it will override it if true or add it as their secondary phone number if false

Responses
200
400
404
409
post/v1/verification/otp/sms/validate
Request samples
application/json
{
  • "phone_number": "string",
  • "passcode": "string",
  • "update_primary": false
}
Response samples
application/json
{
  • "result": true
}