Skip to main content
POST
Verify a sign-in code and mint a session token

Authorizations

x-api-key
string
header
required

Body

application/json

The challenge being answered and the one-time code the customer received.

challenge_id
string
required

The challenge_id returned when the code was requested.

code
string
required

The one-time code the customer received.

Response

A customer-bound session

data
object

A customer-bound session. Send session_token on later requests via the x-vg-ctx-session-token header to act as the signed-in customer.