# Verify code

Verifies the code entered by the user. On successful verification, returns all data needed
for backend verification including the phone number, token, code, timestamp, and HMAC proof 
(if account has verificationSecret configured).

The number of attempts is limited based on account configuration (default: 6).

Endpoint: POST /v1/validations/{token}/verify
Version: 1.0.0
Security: ApiKeyAuth

## Path parameters:

  - `token` (string, required)
    The validation token returned from the start validation endpoint
    Example: "val_7af7215261b8497cb355e617b13f4ef2"

## Request fields (application/json):

  - `code` (string, required)
    The 6-digit verification code from SMS
    Example: "123456"

## Response 200 fields (application/json):

  - `verified` (boolean, required)
    Whether the verification was successful
    Example: true

  - `phoneNumber` (string)
    The verified phone number (only present if verified is true)
    Example: "1234567890"

  - `token` (string)
    The validation token (only present if verified is true)
    Example: "550e8400-e29b-41d4-a716-446655440000_abc123"

  - `code` (string)
    The verification code that was verified (only present if verified is true)
    Example: "123456"

  - `timestamp` (string)
    When the validation was started (only present if verified is true)
    Example: "2024-01-15T10:30:00Z"

  - `proof` (string)
    HMAC proof for this verification (only present if verified is true and tenant has verificationSecret)
    Example: "86dd8444ed76402c93ce62497cb29a0d7af7215261b8497cb355e617b13f4ef2"

  - `verifiedAt` (string)
    When the verification was completed (only present if verified is true)
    Example: "2024-01-15T10:31:15Z"

## Response 400 fields (application/json):

  - `message` (string, required)
    Human-readable error message
    Example: "Invalid code"

  - `error` (string)
    Error code for programmatic handling
    Example: "INVALID_CODE"

  - `attemptsRemaining` (integer)
    Number of verification attempts remaining (only for verification errors)
    Example: 3

## Response 401 fields (application/json):

  - `message` (string, required)
    Human-readable error message
    Example: "Invalid code"

  - `error` (string)
    Error code for programmatic handling
    Example: "INVALID_CODE"

  - `attemptsRemaining` (integer)
    Number of verification attempts remaining (only for verification errors)
    Example: 3

## Response 404 fields (application/json):

  - `message` (string, required)
    Human-readable error message
    Example: "Invalid code"

  - `error` (string)
    Error code for programmatic handling
    Example: "INVALID_CODE"

  - `attemptsRemaining` (integer)
    Number of verification attempts remaining (only for verification errors)
    Example: 3

## Response 429 fields (application/json):

  - `message` (string, required)
    Human-readable error message
    Example: "Invalid code"

  - `error` (string)
    Error code for programmatic handling
    Example: "INVALID_CODE"

  - `attemptsRemaining` (integer)
    Number of verification attempts remaining (only for verification errors)
    Example: 3

## Response 500 fields (application/json):

  - `message` (string, required)
    Human-readable error message
    Example: "Invalid code"

  - `error` (string)
    Error code for programmatic handling
    Example: "INVALID_CODE"

  - `attemptsRemaining` (integer)
    Number of verification attempts remaining (only for verification errors)
    Example: 3