POST /api/auth/verify-otp

Verify a one-time password (OTP) for an email address.

This endpoint verifies a one-time password (OTP) previously sent to an email address.

A successful verification confirms ownership of the email address.

When to use

HTTP

POST /api/auth/verify-otp
Content-Type: application/json

Request Body

{
  "email": "user@example.com",
  "otp": "123456"
}

Field	Type	Required	Description
email	string	Yes	Target email address
otp	string	Yes	One-time password

Response

{
  "success": true
}

Error

{
  "success": false,
  "message": "Invalid or expired OTP"
}

Error

{
  "success": false,
  "message": "Too many attempts"
}