Skip to main content
POST
/
sdk
/
verify-token
Verify Token
curl --request POST \
  --url https://api.botshield.ai/operations/sdk/verify-token \
  --header 'Content-Type: application/json' \
  --data '
{
  "token": "<string>"
}
'
{
  "valid": true,
  "reason": "<string>",
  "expired_at": "2023-11-07T05:31:56Z",
  "claims": {
    "request_id": "<string>",
    "verified": true,
    "botshield_user_id": "<string>",
    "organization_id": "<string>",
    "partner_user_id": "<string>",
    "auth_mode": "email",
    "user_email": "<string>",
    "timestamp": "<string>",
    "issued_at": 123,
    "expires_at": 123
  }
}

Body

application/json
​
token
string
required

The JWT verification receipt from a completed verification (received via webhook, polling, or return URL)

Response

200 - application/json

Token validation result

​
valid
boolean
required

Whether the token signature is valid and not expired

​
reason
string

Human-readable reason if token is invalid (e.g., 'Token has expired', 'Invalid token')

​
expired_at
string<date-time>

When the token expired (only present for expired tokens)

​
claims
object

Decoded JWT claims (present for valid tokens, partially present for expired tokens)