Verify TOTP code

POSThttps://app.speybooks.com/api/v1/auth/totp/verify

Complete two-factor authentication by verifying a six-digit TOTP code. Send the temporary token from login in the Authorization header. Returns the access and refresh tokens and the user profile, identical to a non-TOTP login response.

Header parameters

authorizationstringrequired

Body parameters

tokenstringrequired

Six-digit TOTP code from the authenticator app.

min length: 6 · max length: 6

Response

200TOTP verified. Returns full access and refresh tokens.

Show response fields

accessTokenstring

expiresIninteger

refreshTokenstring

userobject

Show child attributes

emailstring

fullNamestring

idinteger

isAdminboolean

usernamestring

Error codes

400Validation error or invalid token type.

401Invalid TOTP code, expired temp token, or TOTP not configured.

429Rate limit exceeded.

RequestPOST/v1/auth/totp/verifycurl

curl -X POST https://api.speybooks.com/v1/auth/totp/verify \
  -H "Authorization: Bearer <tempToken>" \
  -H "Content-Type: application/json" \
  -d '{"token": "123456"}'

Response200

{
  "success": true,
  "data": {
    "accessToken": "eyJ...",
    "refreshToken": "eyJ...",
    "expiresIn": 900,
    "user": {
      "id": 1,
      "username": "user@example.com",
      "email": "user@example.com",
      "fullName": "Jane Doe",
      "isAdmin": false
    }
  }
}