Challenges

Create an OTP challenge for an unauthenticated step-up action

Issues an email OTP for actions that don't require an existing session (e.g. reset_password). Always returns 201 to avoid leaking account existence.

post/v1/public/challenges

Request

  • Base URL
    https://identity-api.paymongo.com
  • URL
    https://identity-api.paymongo.com/v1/public/challenges
  • Auth
    none required

Request body

Example request

{
  "data": {
    "attributes": {
      "action": "reset_password",
      "email": "user@example.com",
      "factor": "email"
    }
  }
}

Response

Created

has_moreboolean

Example response

{
  "data": {
    "attributes": {
      "expiration_at": 1735689600,
      "factor": "email"
    }
  }
}

Changes

No recorded changes to this operation across all 1 revision of this API.