Verify MFA code and complete authentication

1 min

POST

https://api.upstartcommerce.com/api/v1/auth/mfa/verify

Verifies the MFA code (TOTP, SMS OTP, or backup code) and completes the authentication process started by the login endpoint.

Upon successful verification, returns access and refresh tokens.

acceptstringGenerated from available response content types

bodyobjectMFA verification details

200<p>MFA verification successful - tokens issued</p>

400Invalid request

401Invalid MFA code or challenge expired

403Account locked due to too many failed attempts

500Internal server error

curl --request POST \
     --url https://api.upstartcommerce.com/api/v1/auth/mfa/verify \
     --header 'accept: application/json' \
     --header 'content-type: application/json' \
     --data '{
     "challengeId": "ch_abc123xyz",
     "code": "123456"
     }'