Skip to main content
POST
Verify Sign-in Code

Verify Sign-in Code

Takes the six-digit code from the email sent by Send Verification Email (or by Send Proposal Sign-in Code) and answers a fresh access token: the token the email’s link would have carried back to the page as ?token=. Send it as Token with the sign-up (and with Check Sign-up Email): it proves the address, so the sign-up goes ahead instead of answering MUST_SIGN_IN, and it skips reCAPTCHA, whose answer was spent on the first attempt. A right code is spent: the token it came from, and the link in the same email, stop working. The token answered lasts 60 minutes, so the customer can finish the rest of the sign-up form with it. It is minted without the second factor, like every emailed token, so it cannot open a session on an account with two-factor authentication.

Authentication

No authentication required. Every wrong code is counted: after 5 for the same code that code is refused even when right, after 20 for the account within 24 hours every code is refused until the period has passed, and wrong codes count towards the failed sign-in limit of the network they come from.

Request Body

string
required
The address the code was sent to.
string
required
The six digits. Spaces and dashes are ignored.

Response

string
The proof of the address, for the sign-up’s Token.

Errors

Examples

TypeScript Integration