Verify 2fa

post

Authorizations

jwtAuth

AuthorizationstringOptional

Bearer authentication header of the form Bearer <token>.

Body

application/json

user_idstringRequired

User email or phone

churchstringRequired

Church ID

codestringRequired

2FA code

device_idstringOptional

Device ID

Responses

200Success

application/json

idstring · uuidRead-onlyRequired

profilestringRead-onlyRequired

additional_user_fieldsstringRead-onlyRequired

last_loginstring · date-time · nullableOptional

emailstring · email · max: 254Required

phonestringRequired

rolestring · enumOptional

• member - Member
• admin - Basic Admin
• super_admin - Super Admin

Possible values:

has_2fabooleanOptional

is_deletedbooleanOptional

deleted_atstring · date-time · nullableOptional

permissionsanyOptional

login_attemptsinteger · min: -2147483648 · max: 2147483647Optional

api_keystring · max: 64 · nullableOptional

legacy_idstring · nullableOptional

nextgen_legacy_idstring · nullableOptional

churchstring · uuidRequired

post

/api/auth/verify-2fa

HTTPcURLJavaScriptPython

POST /api/auth/verify-2fa HTTP/1.1
Host: prosper-api-test.churchpad.com
Authorization: Bearer YOUR_SECRET_TOKEN
Content-Type: application/json
Accept: */*
Content-Length: 67

{
  "user_id": "text",
  "church": "text",
  "code": "text",
  "device_id": "text"
}

200Success

{
  "id": "123e4567-e89b-12d3-a456-426614174000",
  "profile": "text",
  "additional_user_fields": "text",
  "last_login": "2026-04-04T02:30:50.203Z",
  "email": "[email protected]",
  "phone": "text",
  "role": "member",
  "has_2fa": true,
  "is_deleted": true,
  "deleted_at": "2026-04-04T02:30:50.203Z",
  "permissions": null,
  "login_attempts": 1,
  "api_key": "text",
  "legacy_id": "text",
  "nextgen_legacy_id": "text",
  "church": "123e4567-e89b-12d3-a456-426614174000"
}