VerifySignInCode the auth

POST/auth/verify-sign-in-code

No session needed.

Body

application/json

challenge_idstringRequired
codestringRequired

Responses

200OK · AuthResponseSigns in an existing account; never creates an account.
401UnauthorizedInvalid, expired or exhausted sign-in code, or account no longer exists

curl -X POST https://api.fryll.com/auth/verify-sign-in-code \
  -H "Content-Type: application/json" \
  -d '{
    "challenge_id": "0192f3a4-81d0-7c61-a3b2-5e6f7a8b9c0d",
    "code": "123456"
  }'

const res = await fetch(`https://api.fryll.com/auth/verify-sign-in-code`, {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({
    "challenge_id": "0192f3a4-81d0-7c61-a3b2-5e6f7a8b9c0d",
    "code": "123456"
  }),
});
const data = await res.json();

Response200OK

{
  "access_token": "fry_9xWq2mF4dKp7LrT1vNc8BzYh3sJ6eQaU0gXiOlVkR5w",
  "token_type": "Bearer",
  "expires_at": "2026-10-14T10:24:03.118Z",
  "user": {
    "id": "0192f3a4-81d0-7c61-a3b2-5e6f7a8b9c0d",
    "created_at": "2026-10-14T10:24:03.118Z",
    "updated_at": "2026-10-14T10:24:03.118Z",
    "email": "emma@example.com",
    "first_name": "Emma",
    "last_name": "Collins"
  }
}