POST /auth/otp/send
Send a one-time code for passwordless sign-in — no password field. User enters email or phone, receives a code, then verifies with POST /auth/otp/verify to get a token.
Email OTP delivers the code via email; Phone OTP delivers via SMS. Which method is available depends on your project’s Auth settings (Sign-in method: Email OTP only, Phone OTP only, or Both).
When Auto-create user on first OTP is enabled, a new account is created if the identifier (email or phone) doesn’t exist yet.
Endpoint
Section titled “Endpoint”POST /v1/public/projects/:projectSlug/auth/otp/sendRequest Body
Section titled “Request Body”Send either email or phone—one is required. Which is accepted depends on your project’s otp_channels (Email OTP only, Phone OTP only, or Both).
| Field | Type | Required | Description |
|---|---|---|---|
email | string | One of email/phone | Email address (valid format) |
phone | string | One of email/phone | Phone in E.164 format (e.g. +919876543210) |
Example: Email OTP
Section titled “Example: Email OTP”{ "email": "user@example.com"}Example: Phone OTP
Section titled “Example: Phone OTP”{ "phone": "+919876543210"}Response
Section titled “Response”Success (200 OK)
Section titled “Success (200 OK)”{ "message": "OTP sent successfully", "accountExists": true}| Field | Type | Description |
|---|---|---|
message | string | Success message |
accountExists | boolean | true if the user already had an account; false if a new user was created (when auto-create is enabled) |
Error Responses
Section titled “Error Responses”| Status Code | Description |
|---|---|
| 400 | Invalid request: missing/ invalid email or phone; or “Phone OTP is not enabled for this project” / “Email OTP is not enabled for this project” when using an identifier your project doesn’t support |
| 400 | ”No account found. Please sign up first.” when identifier is unknown and auto-create is disabled |
| 429 | Too many OTP requests (rate limited) |
Related Endpoints
Section titled “Related Endpoints”- POST /auth/otp/verify - Verify the code and get a JWT
- POST /auth/login - Password-based login
Try It Now
Section titled “Try It Now”POST
https://api.aerostack.dev/v1/public/projects/your-project/auth/otp/send