---
title: "Verify second factor"
method: POST
path: "/global/auth/verify"
---

# Verify second factor

`POST /global/auth/verify`

Exchange a valid Basic Auth password plus a TOTP code for a short-lived second-factor session token. Returns 401 if the password is wrong, 400 if TOTP is not enabled, and 401 with { totp: true } if the code is invalid.

## Request body

- object
  - `code` string, required

## Response `200`

Second-factor session token

- object
  - `token` string, required
  - `expiresAt` number, required

---

[API](https://skmtc.dev/isogonic/apis/codeplane.md) · [All operations](https://skmtc.dev/isogonic/apis/codeplane/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/isogonic/codeplane/revisions/e787ab2e6692/schema)