# Verify OTP

**POST /user/otp/verify**

Verifies that the passed OTP is valid for the user account. In case the OTP is invalid a `404` is returned.



## Servers
- Preview: https://api.pace.cloud/user/2022-1 (Preview)


## Authentication methods
- OAuth2
- Oidc


## Parameters



## Body parameters
Content-type: application/json

- **otp** (string)
  one time password
- **types** (array[string])
  the one time password type to validate against. If none provided all default types are checked.
* `login` login otp ([created and send via email](#operation/SendUsersLoginOTP))
* `account` user account otp ([created on demand via pin / password](#operation/CreateOTP).)
* `totp` user provided TOTP (authenticator)
* `device-totp` device TOTP ([e.g. PACE Drive App, PACE Car App](#operation/CreateTOTP))


## Responses
### 204: Valid OTP.

### 401: OAuth token missing or invalid or a linked identity is missing.

Linked identity missing is a special case where you need to make sure that
the user has additionally logged in / authorized with a third-party.

This is not relevant for most use-cases.

The specific error code that identifies a missing linked identity is `missing-linked-identity`

Example:

```
  {
      "errors": [
          {
              "id": "cbgmhslmp1o9or9kh1p0",
              "title": "Missing linked identity for authorized access",
              "detail": "Linked identity is needed to access this resource, please check why the user does not have a linked identity",
              "status": "401",
              "code": "missing-linked-identity"
          }
      ]
  }
```


#### Body Parameters: application/vnd.api+json (object)
- **errors** (array[object])
  

### 404: Resource not found

#### Body Parameters: application/vnd.api+json (object)
- **errors** (array[object])
  

### 406: The specified accept header is invalid

#### Body Parameters: application/vnd.api+json (object)
- **errors** (array[object])
  

### 415: The specified content type header is invalid

#### Body Parameters: application/vnd.api+json (object)
- **errors** (array[object])
  

### 422: The request was well-formed but was unable to be followed due to semantic errors.

#### Body Parameters: application/vnd.api+json (object)
- **errors** (array[object])
  

### 500: Internal server error

#### Body Parameters: application/vnd.api+json (object)
- **errors** (array[object])
  


[Powered by Bump.sh](https://bump.sh)