FRfrontegg
Passwordless

SMS code postlogin

This route authenticates a local user and is the second step when authenticating using the sms otc passwordless mechanism. Send the frontegg-vendor-host as a header to declare which vendor. This is your domain name in the Frontegg Portal ➜ Workspace Settings ➜ Domains ➜ Domain Name. Send the user's token id as a POST body params. Include the invitation token if the user is signing up by invitation. Send the recaptcha token if the recaptcha is enabled for login. The route returns the refresh cookie and JWT.

post/resources/auth/v1/passwordless/smscode/postlogin

Request

Request body

tokenstring required

One time code to login with - get it from the email sent after prelogin request

recaptchaTokenstring
invitationTokenstring

Response

tokenTypestring
mfaRequiredboolean required
mfaTokenstring
mfaEnrolledboolean
mfaStrategiesobject
qrCodestring
recoveryCodestring
accessTokenstring required
refreshTokenstring required
expiresInnumber required
expiresstring required
userIdstring
userEmailstring
emailVerifiedboolean
isBreachedPasswordboolean

Changes

No recorded changes to this operation across all 1 revision of this API.