Verify an OTP Code

An OTP code sent to a buyer's phone or email

A reference ID from a successful request to POST /api/auth/send-code.

The header containing a valid appID.

A response from a successful request to

The timestamp value formatted per RFC3339. This does not allow nulls.

Response for Auth errors

Auth error reason codes

Request_Validation Not_Found Unauthenticated Unauthenticated_Retry_With_PII Unauthenticated_Buyer_Mismatch Unauthenticated_Buyer_Not_Found Invalid_Token Too_Many_Code_Attempts Too_Many_Unverified_Codes_Sent Dependency_Unavailable System_Failure Service_Unavailable

The underlying http status code

A simple message in english describing the error and can be returned to the consumer

The domain where the error is originating from as defined by the service

Any additional details to be conveyed as determined by the service. If present, will return map of key value pairs

Unauthorized. Indicates that provided credentials is not valid

A reason code specific to the service and can be used to identify the exact issue. Should be unique within a domain

The underlying http status code

A simple message in english describing the error and can be returned to the consumer

The domain where the error is originating from as defined by the service

Any additional details to be conveyed as determined by the service. If present, will return map of key value pairs

Forbidden. Indicates that request cannot be authorized

A reason code specific to the service and can be used to identify the exact issue. Should be unique within a domain

The underlying http status code

A simple message in english describing the error and can be returned to the consumer

The domain where the error is originating from as defined by the service

Any additional details to be conveyed as determined by the service. If present, will return map of key value pairs

Response for Auth errors

Auth error reason codes

The underlying http status code

A simple message in english describing the error and can be returned to the consumer

The domain where the error is originating from as defined by the service

Any additional details to be conveyed as determined by the service. If present, will return map of key value pairs

200A response from a successful request to POST /api/auth/buyer/verify-code.

400Response for Auth errors

401Unauthorized. Indicates that provided credentials is not valid

403Forbidden. Indicates that request cannot be authorized

503Response for Auth errors

`POST /api/auth/buyer/verify-code`.