Authentication factors

Verify enrollment of a user device for authentication using one-time passwords

The second step in enrolling the logged-in user's device for one-time passwords: submit the code the device received to complete enrollment. Once enrolled, the device can verify transactions and step up tokens.

The challenge expires after 5 minutes, and the number of incorrect attempts is capped to reduce the risk of fraud. Once either limit is hit, issue a fresh challenge.

:::note On sandbox, no text message is sent and verificationCode is always 123456. :::

post/authentication_factors/otp/{channel}/verify

Request

  • Base URL: https://sandbox.weavr.io/multi
  • URL: https://sandbox.weavr.io/multi/authentication_factors/otp/{channel}/verify
  • Auth: API key in header api-key and HTTP bearer

Path parameters

channel'SMS' required
  • SMS: The one-time-password is sent as a text message

The unique identifier for the channel.

Headers

idempotency-refstring
Example:transfer-2026-08-07-001

A unique call reference generated by the caller that, taking into consideration the payload as well as the operation itself, helps avoid duplicate operations. Idempotency reference uniqueness is maintained for at least 24 hours.

Request body

verificationCodestring required

A randomly generated one-time use code.

Example request

{
  "verificationCode": "654321"
}

Response

Success - No Content.

Changes

No recorded changes to this operation across all 1 revision of this API.