POSTPublic

Verify external identity code

/api/v1/public/external-identity/verify

Exchange the email and 6-digit code for a short-lived opaque token. Send it as header X-Identity-Token (not Bearer) on the other public identity routes. Invalid/expired codes are indistinguishable from unknown emails (422 IDENTITY_CODE_INVALID).

Path parameters

This endpoint has no path parameters.

Query parameters

This endpoint has no query parameters.

Request body

Field	Type	Description
email Required	string	External signer email. e.g. "signer@acme.test"
code Required	string	Exactly 6 digits. e.g. "123456"

Responses

Status	Meaning
200	See the example response.
422	See the example response.
401	Missing or invalid Bearer token.

Request

curl

curl -X POST 'https://api.dkbsigns.com/api/v1/public/external-identity/verify' \
  -H 'Content-Type: application/json' \
  -d '{"email":"signer@acme.test","code":"123456"}'

Response 200

json

{
  "access_token": "opaque-identity-token"
}