Skip to main content
POST
Verify login OTP

Body

application/json
flow_token
string
required
otp
string
required
Pattern: ^\d{6}$
device_name
string | null
default:Consumer Portal
Maximum string length: 50
remember_device
boolean
default:false

When true, the backend sets an HTTP-only trusted-device cookie after successful OTP verification.

Response

Consumer logged in. May include a Set-Cookie header for the trusted device when requested.

message
string
required
Example:

"Logged in."

meta
object
required
Last modified on July 19, 2026