---
title: "Sign in for real and verify the issued token against the JWKS; returns evidence, never tokens."
method: POST
path: "/account/integration/verify-login"
tags: ["account"]
---

# Sign in for real and verify the issued token against the JWKS; returns evidence, never tokens.

`POST /account/integration/verify-login`

## Request

- Base URL: `https://api.thebridge.dev` (the document declares no server; this is the origin it was published from)
- URL: `https://api.thebridge.dev/account/integration/verify-login`
- Auth: none declared

## Request body

- VerifyLoginRequestDto
  - `email` string, required
  - `password` string, required: Used for this one sign-in and never stored, logged or returned.
  - `origin` string: The web origin to sign in from. Must be one of the app's allowed origins. Defaults to the app's UI URL when that is allowed, else the first allowed origin.

## Response `200`

- object

---

[API](https://skmtc.dev/thebridge/apis/bridge-api.md) · [All operations](https://skmtc.dev/thebridge/apis/bridge-api/llms.txt) · [OpenAPI document](https://skmtc.dev/thebridge/apis/bridge-api/revisions/290fffcb3d80?raw)