---
title: "POST /v2/challenge:verify"
method: POST
path: "/v2/challenge:verify"
tags: ["challenge"]
---

# POST /v2/challenge:verify

`POST /v2/challenge:verify`

Verifies the challenge response.

## Request body

- VerifyChallengeResponseRequest — Signed ChallengeResponse.
  - `expectedIdentity` string — Optional. Service can optionally provide identity information about the device or user associated with the key. For an EMK, this value is the enrolled domain. For an EUK, this value is the user's email address. If present, this value will be checked against contents of the response, and verification will fail if there is no match.
  - `challengeResponse` string, byte — Required. The generated response to the challenge, the bytes representation of SignedData.

## Response `200`

Successful response

---

[API](https://skmtc.dev/google/apis/verifiedaccess.md) · [All operations](https://skmtc.dev/google/apis/verifiedaccess/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/google/verifiedaccess/revisions/87c651366896/schema)