Skip to content

Complete two-factor sign-in

POST
/login/otp
curl --request POST \
--url https://api.proxyrequest.com/api/v1/login/otp \
--header 'Accept-Language: de' \
--header 'Content-Type: application/json' \
--data '{ "challenge": "a-single-use-challenge-returned-by-login", "code": "492031" }'

Exchanges a single-use sign-in challenge and authenticator code for account tokens.

  • None
Accept-Language
string
default: en

Preferred language for human-readable API errors. Supported languages: en, ru, uk, de, it, fr, es, zh-hans, ja. Regional language tags and quality weights are accepted; unsupported or omitted values use English.

Examples
de
object
challenge
required
string
>= 1 characters <= 128 characters
code
required
string
>= 1 characters /^[0-9]{6}$/
Examples
ExampleCompleteTOTPSign-in

Complete TOTP sign-in

{
"challenge": "a-single-use-challenge-returned-by-login",
"code": "492031"
}

The operation completed successfully.

Media typeapplication/json
object
token
required

Short-lived access token used in the Authorization header.

string
refresh
required

Long-lived token used to request a new access token.

string
Examples
ExampleIssuedTokens

Issued tokens

{
"token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbl90eXBlIjoiYWNjZXNzIiwidXNlcl9pZCI6IjU1MGU4NDAwLWUyOWItNDFkNC1hNzE2LTQ0NjY1NTQ0MDAwMSJ9.example-signature",
"refresh": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbl90eXBlIjoicmVmcmVzaCIsInVzZXJfaWQiOiI1NTBlODQwMC1lMjliLTQxZDQtYTcxNi00NDY2NTU0NDAwMDEifQ.example-signature"
}

The request is malformed or violates a business rule.

Media typeapplication/json

Validation and API error payload. Field names may be added dynamically; field errors are returned as arrays of human-readable messages.

object
detail
string
non_field_errors
Array<string>
key
additional properties
One of:
string
Examples
Exampleexample

Validation error

{
"non_field_errors": [
"The request could not be processed."
]
}
Content-Language
string

Language used for human-readable errors.