---
title: "Consume a one-time code and start a session"
method: POST
path: "/api/auth/otp/verify"
---

# Consume a one-time code and start a session

`POST /api/auth/otp/verify`

## Request

- Base URL: `https://disban.io`
- URL: `https://disban.io/api/auth/otp/verify`
- Auth: none declared

## Request body

- object
  - `intent` 'signup' | 'login', required
  - `challenge_id` string, required
  - `code` string, required

## Response `200`

Verified account and HttpOnly session cookie

- Account
  - `user` object, required
    - `id` string, required
    - `name` string, required
    - `email` string, email, required

## Other responses

- `400`: Request could not be completed
- `401`: Request could not be completed
- `403`: Request could not be completed
- `409`: Request could not be completed
- `413`: Request could not be completed
- `415`: Request could not be completed
- `429`: Rate or quota limit; honor Retry-After
- `502`: Request could not be completed
- `503`: Request could not be completed

---

[API](https://skmtc.dev/disban/apis/disban-api.md) · [All operations](https://skmtc.dev/disban/apis/disban-api/llms.txt) · [OpenAPI document](https://skmtc.dev/disban/apis/disban-api/revisions/1becfdd524a2?raw)