Verify the login OTP and issue access + refresh tokens

Staging

https://fin-api.digetpay.com

POST

/v1/developer-portal/auth/login/verify-otp

Exchanges the OTP challenge for an access token (12h) and a refresh token
(30 days). The challenge is single-use and deleted on success.

Send the access token as Authorization: Bearer <accessToken> for all
developer-portal endpoints. Rotate it via refresh before expiry.

Request

Body Params application/jsonRequired

Example

{
    "challengeId": "a1b2c3d4e5f60718293a4b5c",
    "otp": "123456"
}

Request Code Samples

Shell

JavaScript

Java

Swift

PHP

Python

HTTP

Objective-C

Ruby

OCaml

Dart

curl --location 'https://fin-api.digetpay.com/v1/developer-portal/auth/login/verify-otp' \
--header 'Content-Type: application/json' \
--data '{
    "challengeId": "a1b2c3d4e5f60718293a4b5c",
    "otp": "123456"
}'

Responses

🟢200OK

application/json

OTP verified; tokens and identity returned.

Bodyapplication/json

Example

{
    "accessToken": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMCJ9.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c",
    "refreshToken": "4f6b2a1c8e9d0f1a2b3c4d5e6f708192",
    "tokenType": "Bearer",
    "expiresIn": 43200,
    "user": {
        "id": "10",
        "email": "dev@company.com",
        "name": "Sarah Developer"
    },
    "organization": {
        "id": "42",
        "name": "Acme Payment Solutions",
        "legalName": "Acme Payment Solutions LLC",
        "status": "ONBOARDING"
    }
}

🟠400Bad Request

🟠401Unauthorized

Modified at 2026-09-16 09:43:02

Resend login OTP via email and SMS