Authentication

Production-ready REST endpoints. All responses are JSON; idempotency keys supported on POSTs.

POST/v1/auth/otp/send

Send a phone OTP to begin verification.

Request body

{ "phone": "+14155550142" }

Response

{ "request_id": "uuid", "expires_in": 300 }

POST/v1/auth/otp/verify

Verify the OTP and exchange for a session token.

Request body

{ "request_id": "uuid", "code": "482910" }

Response

{ "token": "jwt", "user": { ... } }

POST/v1/auth/oauth/:provider

Exchange OAuth code for a ByName session.

Request body

{ "code": "...", "redirect_uri": "..." }

Need SDKs?

Official clients for JavaScript, Swift, and Kotlin ship alongside the platform.