Validate Password

post https://{host}/auth/v1/web/password/validate

Validates the password of an existing user account and generates the access token and key. The token is valid for 15 minutes by default. You can use the key to regenerate token.

Resource Information


URI for Mobile App	`auth/v1/password/validate`
URI for Web App	`auth/v1/web/password/validate`
Rate Limited?	Yes
Authentication	No
HTTP Method	POST
Batch Support	No

Request URL

For mobile application:

http:ae-host/auth/v1/password/validate

For web application:

http:ae-host/auth/v1/web/password/validate

Request Body Parameters

{   "identifierType":"USERNAME",
    "identifierValue":"9940000000",
    "deviceId": "deviceid1",
    "brand": "KANMODEMO",
    "sessionId": "D-c62d7326-e122-4186-8c72-e42f270b0cdf",
    "password":"password"
}

Parameter	Datatype	Description
`identifierType`*	enum	Identifier used to generate OTP. Values: `MOBILE`, `EMAIL`, `USERNAME`.
`identifierValue`*	string	Value of the specified `identifierType`. For example, if `identifierType` is `MOBILE`, the `identifierValue` is the mobile number.
`deviceId`**	string	Unique ID of the device used for password validation. Should be the same as the `deviceId` used to generate the current token. Not applicable for web applications.
`brand`*	string	Name of the brand or org associated with the current account.
`sessionId`*	string	Session ID generated through the `v1/token/generate` API.
`password`*	string	Password of the current account. Note: You can configure maximum retries as well as account locking after several defined unsuccessful attempts to enter the correct password.

Parameters marked with * are mandatory, and the parameters marked with ** are required for the mobile app.

Response parameters

{
    "status": {
        "success": true,
        "code": 200,
        "message": "SUCCESS"
    },
    "auth": {
        "token": "eyJpZHYiOlsiTU9CSUxFfDk5NDU1NjAyMjQiXSwiZGV2IjoiZGV2aWNlaWQxIiwib3JnIjoiU1RBTkRBUkRBUFAiLCJhbGciOiJIUzI1NiJ9.eyJ1aWQiOiI3Njg4MTYiLCJpc3MiOiJDQVBJTExBUlkgVEVDSE5PTE9HSUVTIiwiaXNjIjoiZmFsc2UiLCJvZ2MiOlsiMTUxMDYwfHNhLmRlbW8uc29sdXRpb24iXSwiZXhwIjoxNTk3OTQzODU1LCJpYXQiOjE1OTc5NDAyNTUsInJvbCI6IlVTRVIifQ.Wyt_xxlqtmMH3lyReO718sDokngYGp_HSLuiBOyaEds",
        "key": "eyJpZHYiOlsiTU9CSUxFfDk5NDU1NjAyMjQiXSwiZGV2IjoiZGV2aWNlaWQxIiwib3JnIjoiU1RBTkRBUkRBUFAiLCJhbGciOiJIUzI1NiJ9.eyJ1aWQiOiI3Njg4MTYiLCJpc3MiOiJDQVBJTExBUlkgVEVDSE5PTE9HSUVTIiwiaWF0IjoxNTk3OTQwMjU1LCJyb2wiOiJBVVRIIn0.UKCOU1oFLPsRx5YJRkClIaRVmE1lNDCjuuKQ9nnMdhE"
    },
    "user": {
        "appRegistered": false,
        "sessionId": null,
        "role": "USER",
        "userRegisteredForPassword": true
    }
}

Parameter	Description
status	Object containing status information
success	Boolean indicating the success status
code	Number indicating the status code (e.g., 200 for success)
message	String providing a message related to the status
auth	Object containing authentication information
token	String representing the authentication token. By default, the token is valid for 15 minutes.
key	String representing the authentication key.
user	Object containing user information
appRegistered	Boolean indicating if the user is registered in the app
sessionId	Value representing the user's session ID
role	String indicating the user's role (e.g., "USER")
userRegisteredForPassword	Boolean indicating if the user is registered for a password

Language

Credentials

Basic

base64

URL

Click Try It! to start a request and see the response here!