curl -X POST https://apx.didit.me/auth/v2/programmatic/verify-email/ \
-H "Content-Type: application/json" \
-d '{
"email": "you@yourdomain.com",
"code": "A3K9F2"
}'import requests
resp = requests.post(
"https://apx.didit.me/auth/v2/programmatic/verify-email/",
json={
"email": "you@yourdomain.com",
"code": "A3K9F2",
},
timeout=10,
)
resp.raise_for_status()
data = resp.json()
api_key = data["application"]["api_key"]
print(f"Save this for x-api-key: {api_key}")const resp = await fetch(
"https://apx.didit.me/auth/v2/programmatic/verify-email/",
{
method: "POST",
headers: { "Content-Type": "application/json" },
body: JSON.stringify({
email: "you@yourdomain.com",
code: "A3K9F2",
}),
},
);
if (!resp.ok) throw new Error(`Verify failed: ${resp.status}`);
const { application, access_token } = await resp.json();
// application.api_key -> x-api-key for verification.didit.me/v3
// access_token -> Authorization: Bearer ... for this auth API<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://apx.didit.me/auth/v2/programmatic/verify-email/",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'email' => 'you@yourdomain.com',
'code' => 'A3K9F2'
]),
CURLOPT_HTTPHEADER => [
"Content-Type: application/json",
"x-api-key: <api-key>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://apx.didit.me/auth/v2/programmatic/verify-email/"
payload := strings.NewReader("{\n \"email\": \"you@yourdomain.com\",\n \"code\": \"A3K9F2\"\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("x-api-key", "<api-key>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://apx.didit.me/auth/v2/programmatic/verify-email/")
.header("x-api-key", "<api-key>")
.header("Content-Type", "application/json")
.body("{\n \"email\": \"you@yourdomain.com\",\n \"code\": \"A3K9F2\"\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://apx.didit.me/auth/v2/programmatic/verify-email/")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["x-api-key"] = '<api-key>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"email\": \"you@yourdomain.com\",\n \"code\": \"A3K9F2\"\n}"
response = http.request(request)
puts response.read_body{
"access_token": "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9...",
"refresh_token": "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9...",
"expires_in": 86400,
"organization": {
"uuid": "a1b2c3d4-5678-90ab-cdef-111111111111",
"name": "developer"
},
"application": {
"uuid": "b2c3d4e5-6789-01bc-defg-222222222222",
"name": "developer",
"client_id": "S9LIYGSoWNuGMLHsvEt9dQ",
"api_key": "05mHcOWL8GathLZlz8oIDawYj9qFAcoSHtz-75PAkuo"
}
}Verify Email & Get Credentials
Step 2 of onboarding. Exchanges the 6-char code for a verified account, a default org+app, and a JWT pair. Persist the returned api_key.
curl -X POST https://apx.didit.me/auth/v2/programmatic/verify-email/ \
-H "Content-Type: application/json" \
-d '{
"email": "you@yourdomain.com",
"code": "A3K9F2"
}'import requests
resp = requests.post(
"https://apx.didit.me/auth/v2/programmatic/verify-email/",
json={
"email": "you@yourdomain.com",
"code": "A3K9F2",
},
timeout=10,
)
resp.raise_for_status()
data = resp.json()
api_key = data["application"]["api_key"]
print(f"Save this for x-api-key: {api_key}")const resp = await fetch(
"https://apx.didit.me/auth/v2/programmatic/verify-email/",
{
method: "POST",
headers: { "Content-Type": "application/json" },
body: JSON.stringify({
email: "you@yourdomain.com",
code: "A3K9F2",
}),
},
);
if (!resp.ok) throw new Error(`Verify failed: ${resp.status}`);
const { application, access_token } = await resp.json();
// application.api_key -> x-api-key for verification.didit.me/v3
// access_token -> Authorization: Bearer ... for this auth API<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://apx.didit.me/auth/v2/programmatic/verify-email/",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'email' => 'you@yourdomain.com',
'code' => 'A3K9F2'
]),
CURLOPT_HTTPHEADER => [
"Content-Type: application/json",
"x-api-key: <api-key>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://apx.didit.me/auth/v2/programmatic/verify-email/"
payload := strings.NewReader("{\n \"email\": \"you@yourdomain.com\",\n \"code\": \"A3K9F2\"\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("x-api-key", "<api-key>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://apx.didit.me/auth/v2/programmatic/verify-email/")
.header("x-api-key", "<api-key>")
.header("Content-Type", "application/json")
.body("{\n \"email\": \"you@yourdomain.com\",\n \"code\": \"A3K9F2\"\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://apx.didit.me/auth/v2/programmatic/verify-email/")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["x-api-key"] = '<api-key>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"email\": \"you@yourdomain.com\",\n \"code\": \"A3K9F2\"\n}"
response = http.request(request)
puts response.read_body{
"access_token": "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9...",
"refresh_token": "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9...",
"expires_in": 86400,
"organization": {
"uuid": "a1b2c3d4-5678-90ab-cdef-111111111111",
"name": "developer"
},
"application": {
"uuid": "b2c3d4e5-6789-01bc-defg-222222222222",
"name": "developer",
"client_id": "S9LIYGSoWNuGMLHsvEt9dQ",
"api_key": "05mHcOWL8GathLZlz8oIDawYj9qFAcoSHtz-75PAkuo"
}
}Authorizations
Body
Response
Email verified. The response contains tokens for this auth API plus the brand-new application's client_id and api_key. Persist the api_key securely — it is the long-lived credential used by every verification API call.
RS256-signed JWT. Use as Authorization: Bearer <token> for Account Management endpoints on apx.didit.me/auth/v2.
Refresh token paired with the access token.
Lifetime of the access token in seconds (default 86400).
86400
Minimal organization shape returned inline by POST /programmatic/verify-email/.
Show child attributes
Show child attributes
Minimal application shape returned inline by POST /programmatic/verify-email/. Persist the api_key immediately.
Show child attributes
Show child attributes