Verify PIN and log in

POST

/wp-json/wp2/passwordless/v1/verify

curl --request POST \
  --url https://example.com/wp-json/wp2/passwordless/v1/verify \
  --header 'Content-Type: application/json' \
  --data '{ "login": "example", "pin": "example" }'

Publicly checks login+PIN, sets a WordPress cookie session, and returns the user plus nonce. Wrong PIN is 403; too many attempts are 429.

Request Body^required

Media typeapplication/json

object

login

required

WordPress username or email.

string

pin

required

One-time PIN from the email.

string

redirect

Redirect URL after login. Optional.

string

Example

{
  "login": "example",
  "pin": "example"
}

Responses

200

Session

Media typeapplication/json

object

user

Current user object, or null for a guest.

object

id

Numeric entity id.

integer

displayName

Display name.

string

email

Email.

string

nicename

User nicename/slug.

string

nonce

Fresh wp_rest nonce for the next requests.

string

redirect

Redirect URL after login. Optional.

string

Example^generated

{
  "user": {
    "id": 1,
    "displayName": "example",
    "email": "example",
    "nicename": "example"
  },
  "nonce": "example",
  "redirect": "example"
}

400

Wp2platform_pin_ssl / wp2platform_pin_missing

Media typeapplication/json

object

code

Machine-readable error or event code.

string

message

Message text (log, PIN, or password reset).

string

data

Extra WP_Error or license payload.

object

Example^generated

{
  "code": "example",
  "message": "example",
  "data": {}
}

403

Wp2platform_pin_invalid

Media typeapplication/json

object

code

Machine-readable error or event code.

string

message

Message text (log, PIN, or password reset).

string

data

Extra WP_Error or license payload.

object

Example^generated

{
  "code": "example",
  "message": "example",
  "data": {}
}

429

Wp2platform_pin_lock

Media typeapplication/json

object

code

Machine-readable error or event code.

string

message

Message text (log, PIN, or password reset).

string

data

Extra WP_Error or license payload.

object

Example^generated

{
  "code": "example",
  "message": "example",
  "data": {}
}