Create a signed-approval challenge for a pending device login (identified by its user code).
POST
Secret API key operationId: create_login_challenge/v1/os/login/challenge Authorization
Server-to-server. Send a secret key as a Bearer token plus the x-application-id header.
Request body · required
user_codestring required
Responses
201 Challenge
{
"data": {
"action": "string",
"canonical": "string",
"context": {},
"created_at": "2026-01-15T09:30:00Z",
"expires_at": "2026-01-15T09:30:00Z",
"host_id": "018f3c4a-7b2e-7c1d-9e0a-1f2b3c4d5e6f",
"id": "018f3c4a-7b2e-7c1d-9e0a-1f2b3c4d5e6f",
"nonce": "string",
"responded_at": "2026-01-15T09:30:00Z",
"status": "string"
},
"error": {
"code": "string",
"message": "string"
},
"meta": {
"timestamp": "string"
},
"success": false
} 404 No pending login for that code
Request
curl -X POST "https://api.identrahq.com/v1/os/login/challenge" \
-H "Content-Type: application/json" \
-d '{
"user_code": "abcd-efgh"
}'Try it
live requestPOST
https://api.identrahq.com/v1/os/login/challenge