/api/auth/two-factor/verify-backup-code

POST

Verify a backup code for two-factor authentication

Request

Authorization

Bearer Token

Provide your bearer token in the

Authorization

header when making requests to protected resources.

Example:

Authorization: Bearer ********************

Body Params application/json

Examples

Responses

🟢200OK

application/json

Backup code verified successfully

Body

🟠400Bad Request

🟠401Unauthorized

🟠403Forbidden

🟠404Record Not Found

🟠429429

🔴500Server Error

Request Example

Shell

JavaScript

Java

Swift

curl --location --request POST '/api/auth/two-factor/verify-backup-code' \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data-raw '{
    "code": "string",
    "disableSession": "string",
    "trustDevice": "string"
}'

Response Example

200 - Example 1

{
    "user": {
        "id": "string",
        "email": "user@example.com",
        "emailVerified": true,
        "name": "string",
        "image": "http://example.com",
        "twoFactorEnabled": true,
        "createdAt": "2019-08-24T14:15:22Z",
        "updatedAt": "2019-08-24T14:15:22Z"
    },
    "session": {
        "token": "string",
        "userId": "string",
        "createdAt": "2019-08-24T14:15:22Z",
        "expiresAt": "2019-08-24T14:15:22Z"
    }
}

Modified at 2025-09-02 02:31:01

/api/auth/two-factor/verify-otp

/api/auth/two-factor/generate-backup-codes