Challenge
Start re-authentication for an existing WhatsApp authenticator by sending the user a WhatsApp message containing an OTP code.
Response
AuthsignalResponse<ChallengeResponse>
The ID of the Authsignal challenge.
Verify
Finish re-authenticating a WhatsApp OTP authenticator by verifying the code submitted by the user.
Parameters
The OTP code inputted by the user.
Response
AuthsignalResponse<VerifyResponse>
True if the verification was successful.
Only present on first time verification e.g. enrollment.
The ID of the Authsignal user authenticator.
'SMS' | 'AUTHENTICATOR_APP' | 'EMAIL_MAGIC_LINK' | 'EMAIL_OTP' | 'PASSKEY' | 'PUSH' | 'SECURITY_KEY' | 'VERIFF' | 'IPROOV' | 'IDVERSE' | 'PALM_BIOMETRICS_BR'
required
The date and time the authenticator was created in ISO 8601 format.
The date and time the authenticator was first verified in ISO 8601 format.
The date and time the authenticator was last verified in ISO 8601 format.
Whether the authenticator is the default authenticator for the user.
The email address of the authenticator. Only present for email authenticators e.g. email OTP and email magic link.
The phone number of the authenticator. Only present for phone authenticators e.g. SMS/WhatsApp OTP.
The previous SMS channel used to send the OTP code. Only present for phone authenticators e.g. SMS/WhatsApp OTP.
Only present for passkey authenticators.
The ID of the passkey credential.
The device ID of the passkey credential.
The name of the passkey credential.
The AAGUID of the passkey credential.
Whether the passkey credential is backed up.
'singleDevice' | 'multiDevice'
The device type of the passkey credential.
The parsed user agent of the passkey credential.
The user agent of the passkey credential.
The browser of the passkey credential.
The version of the browser.
The major version of the browser.
The device of the passkey credential.
The vendor of the device.
The engine of the passkey credential.
The version of the engine.
The OS of the passkey credential.
The CPU of the passkey credential.
The architecture of the CPU.
The date and time the passkey credential was verified in ISO 8601 format.
'platform' | 'cross-platform'
The authenticator attachment of the passkey credential.
The AAGUID mapping of the passkey credential.
The name of the AAGUID mapping.
The SVG icon of the AAGUID mapping in light mode.
The SVG icon of the AAGUID mapping in dark mode.
A structured code present if the verification failed due to user error. Possible values are:
CODE_INVALID_OR_EXPIRED or MAX_ATTEMPTS_EXCEEDED.
