Skip to main content

Endpoint

POST /passwordless/verify
This feature is disabled by default for new tenants as of 8 June 2017. Please see Application Grant Types for more information.
Once you have a verification code, use this endpoint to login the user with their phone number/email and verification code. This is active authentication, so the user must enter the code in your app.

Remarks

  • The profile scope value requests access to the End-User’s default profile Claims, which are: name, family_name, given_name, middle_name, nickname, preferred_username, profile, picture, website, gender, birthdate, zoneinfo, locale, and updated_at.
  • The email scope value requests access to the email and email_verified Claims.
  • The sample auth0.js script uses the library version 8. If you are using auth0.js version 7, please see this reference guide.

Learn More

Body Parameters

string
required
Grant type, must be password.
string
required
The client_id of your application.
string
required
Use sms or email (should be the same as POST /passwordless/start).Allowed values: email, sms
string
required
The user’s phone number if connection=sms, or the user’s email if connection=email.
string
required
The user’s verification code.
string
Use openid to get an ID Token, or openid profile email to include user profile information in the ID Token.
string
required
Callback URL registered with your application’s Allowed Callback URLs.

Response Messages