---
title: "Validate passcode sent and store setup method."
method: POST
path: "/us-setup/{token}"
---

# Validate passcode sent and store setup method.

`POST /us-setup/{token}`

## Request body

- UsSetupValidateRequest
  - `passcode` string, required — Code/Passcode as received from method being setup.

## Response `200`

Successfully validated and persisted sign in method.

- UsSetupValidateJsonResponse
  - `meta` object, required
    - `code` integer, required — Http status code
  - `response` object, required
    - `chosen_method` string — The chosen_method as passed into API.
    - `phone` string — Phone number if set.

## Other responses

- `302` — Redirect based on success or failure.
- `400` — Failed - bad code, expired token, bad token.

## Changes

> 52 revisions in range; 37 could not be searched.

- **2019-07-23** `11c8459a5c04` — 1 breaking
  - api path removed without deprecation

[Change history](https://skmtc.dev/pallets-eco/apis/flask-security-external-api/changes/us-setup/:token/post.md)

---

[API](https://skmtc.dev/pallets-eco/apis/flask-security-external-api.md) · [All operations](https://skmtc.dev/pallets-eco/apis/flask-security-external-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/pallets-eco/flask-security-external-api/revisions/ee92f388dafa/schema)