OTP Login

curl --request POST \
  --url https://authproxy.turnkey.com/v1/otp_login_v2 \
  --header 'Accept: application/json' \
  --header 'Content-Type: application/json' \
  --header "X-Auth-Proxy-Config-Id: <string> (see Authorizations)" \
  --data '{
    "verificationToken": "<string>",
    "publicKey": "<string>",
    "clientSignature": {
        "publicKey": "<string>",
        "scheme": "<CLIENT_SIGNATURE_SCHEME_API_P256>",
        "message": "<string>",
        "signature": "<string>"
    },
    "invalidateExisting": "<boolean>",
    "organizationId": "<string>"
}'

{
  "session": "<string>"
}

POST

https://authproxy.turnkey.com/v1/otp_login_v2

string

required

Your Auth Proxy config ID, found in Dashboard → AUTH. See Auth Proxy reference for setup.

string

required

Session containing a unique id, expiry, verification type, contact. Verification status of a user is updated when the token is consumed (in OTP_LOGIN requests)

string

required

Client-side public key generated by the user, used as the session public key upon successful login.

object

required

clientSignature field

Show details

boolean

Invalidate all other previously generated Login sessions

string

Unique identifier for a given Organization. If provided, this organization id will be used directly. If omitted, uses the verification token to look up the verified sub-organization based on the contact and verification type.

A successful response returns the following fields:

string

required

Session containing an expiry, public key, session type, user id, and organization id

curl --request POST \
  --url https://authproxy.turnkey.com/v1/otp_login_v2 \
  --header 'Accept: application/json' \
  --header 'Content-Type: application/json' \
  --header "X-Auth-Proxy-Config-Id: <string> (see Authorizations)" \
  --data '{
    "verificationToken": "<string>",
    "publicKey": "<string>",
    "clientSignature": {
        "publicKey": "<string>",
        "scheme": "<CLIENT_SIGNATURE_SCHEME_API_P256>",
        "message": "<string>",
        "signature": "<string>"
    },
    "invalidateExisting": "<boolean>",
    "organizationId": "<string>"
}'

{
  "session": "<string>"
}

Init OTP Verify OTP

⌘I

REST API

SDK reference

Changelogs