Skip to main content
POST
cURL

Authorizations

Authorization
string
header
required

Bearer token authentication

Body

application/json
code
string
required

A backup code to verify. Eg: "123456"

disableSession
boolean

If true, the session cookie will not be set.

trustDevice
boolean

If true, the device will be trusted for 30 days. It'll be refreshed on every sign in request within this time. Eg: true

Response

Backup code verified successfully

user
object
required

The authenticated user object with two-factor details

session
object
required

The current session object, included unless disableSession is true