---
title: "Complete phone sign-up or login by verifying the SMS OTP -- returns a session, same as /auth/login"
method: POST
path: "/auth/phone/verify"
tags: ["Auth"]
---

# Complete phone sign-up or login by verifying the SMS OTP -- returns a session, same as /auth/login

`POST /auth/phone/verify`

## Request

- Base URL: `https://whatareyoudo.ing/api/v1`
- URL: `https://whatareyoudo.ing/api/v1/auth/phone/verify`
- Auth: none declared

## Request body

- PhoneVerifyRequest
  - `phone` string, required
  - `token` string, required
  - `captchaToken` string

## Response `200`

OK

- object
  - `data` object, required
    - `accessToken` string, required
    - `expiresIn` integer, required
    - `refreshToken` string, required
    - `user` object, required
      - `id` string, uuid, required
      - `phone` string
  - `meta` object, required
    - `requestId` string, required

## Other responses

- `401`: INVALID_CREDENTIALS -- wrong, expired, or never-sent code

---

[API](https://skmtc.dev/whatareyoudo/apis/whatcha-api.md) · [All operations](https://skmtc.dev/whatareyoudo/apis/whatcha-api/llms.txt) · [OpenAPI document](https://skmtc.dev/whatareyoudo/apis/whatcha-api/revisions/48dd8a54abea?raw)