API reference
Verify OTP challenge
Validates an unexpired challenge belonging to the authorized reseller account, marking only that challenge verified.
https://api.sparkglim.net/api/white-label/portal/reseller/otp/:challengeId/verifyAccess model
- Access model
- SparkGlim session and member permissions
- Documented availability
- Implemented in source
Availability is verified from source, not a live production guarantee.
Use the creator-team member workflow. Reseller access never grants unrestricted database or administrator access.
Headers
| Name | Type | Validation |
|---|---|---|
AuthorizationRequiredExisting SparkGlim bearer session; server account membership and assigned capabilities still authorize each operation. | string | Validation: Bearer existing authenticated session token. |
Parameters
| Name | Type | Validation |
|---|---|---|
challengeIdRequiredIdentifier returned by the matching OTP request; it is bound to that contact, website and campaign. | string | Validation: UUID or documented resource identifier. |
Request
| Name | Type | Validation |
|---|---|---|
codeRequiredThe existing resource credential or verification code required by this endpoint; never publish a real OTP or ticket secret. | string | Validation: 4–12 digits. |
Request
Examples describe the contract and are not executed. Use authorized test records; never paste a real secret into these pages.
POST /api/white-label/portal/reseller/otp/11111111-1111-4111-8111-111111111111/verify HTTP/1.1
Host: api.sparkglim.net
Authorization: Bearer <EXISTING_SESSION_TOKEN>
Content-Type: application/json
{
"code": "000000"
}Response
{
"success": true,
"data": {
"id": "11111111-1111-4111-8111-111111111111",
"status": "verified",
"source": "sms_verification_codes"
}
}{
"success": false,
"error": "<ERROR_MESSAGE>"
}Validation, permissions, unavailable records and temporary service failures use the handler’s HTTP status and error payload.
Limits & retries
Default Server limit: 100 requests per IP per 60 seconds. Resource-specific controls also apply.
Source compatibility
Authorized operations require account-specific testing.
server/src/api/router.tsserver/src/api/routes/white-label.tsserver/src/white-label/reseller-service.tsserver/src/white-label/schemas.ts