---
title: "Get handoff status with secret"
method: POST
path: "/auth/handoff/{code}/status"
tags: ["Auth"]
---

# Get handoff status with secret

`POST /auth/handoff/{code}/status`

Check the status of a handoff session using the poll secret from initiation. Returns the authentication token once the handoff is complete and the presented secret matches.

## Path parameters

- `code` string, required — The handoff code

## Request body

- HandoffStatusRequest
  - `poll_secret` string, required — The poll secret issued when the handoff was initiated

## Response `200`

Success

- HandoffStatusResponse
  - `status` string, required — Current status of the handoff (pending, completed, expired)
  - `token` string, nullable — Authentication token if handoff is complete
  - `user_id` string, snowflake
  - `user` UserPartialResponse
    - `id` string, snowflake, required
    - `username` string, required — The username of the user, not unique across the platform
    - `discriminator` string, required — The four-digit discriminator tag of the user
    - `global_name` string, nullable, required — The display name of the user, if set
    - `avatar` string, nullable, required — The hash of the user avatar image
    - `avatar_color` integer, required
    - `bot` boolean — Whether the user is a bot account
    - `system` boolean — Whether the user is an official system user
    - `flags` integer, required — The public flags on the user account
    - `mention_flags` 0 | 1 | 2 — Reply mention preference

## Other responses

- `400` — Bad Request - The request was malformed or contained invalid data
- `429` — Too Many Requests - You are being rate limited
- `500` — Internal Server Error - An unexpected error occurred

## Changes

> 16 revisions in range; 1 not diffed.

- **2026-09-18** `dd0ad4ea1c88` — 3 breaking, 3 info
  - the response property `token` became nullable for the status `200`
  - the response property `user/anyOf[#/components/schemas/UserPartialResponse]/avatar` became nullable for the status `200`
  - the response property `user/anyOf[#/components/schemas/UserPartialResponse]/global_name` became nullable for the status `200`
  - response property `token` list-of-types was narrowed by removing types `null` from media type `application/json` of response `200`
  - …2 more
- **2026-09-06** `a52a2cf49d9b` — 16 warning, 100 info
  - added the new `IP_BAN_DECLINED` enum value to the `code` response property for the response status `400`
  - added the new `IP_BAN_DECLINED` enum value to the `code` response property for the response status `500`
  - added the new `PHONE_COUNTRY_NOT_SUPPORTED` enum value to the `code` response property for the response status `400`
  - added the new `PHONE_COUNTRY_NOT_SUPPORTED` enum value to the `code` response property for the response status `500`
  - …112 more
  - …this revision’s changelog is incomplete
- **2026-09-05** `4dbb738a3e22` — 2 info
  - removed the `NSFW_EMOJI_STICKER_BLOCKED` enum value from the `code` response property for the response status `400`
  - removed the `NSFW_EMOJI_STICKER_BLOCKED` enum value from the `code` response property for the response status `500`
- **2026-09-03** `fa36b1b48ca5` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/fluxer/apis/fluxer-api/changes/auth/handoff/:code/status/post.md)

---

[API](https://skmtc.dev/fluxer/apis/fluxer-api.md) · [All operations](https://skmtc.dev/fluxer/apis/fluxer-api/llms.txt) · [OpenAPI document](https://skmtc.dev/fluxer/apis/fluxer-api/revisions/034cfc3e79b4?raw)