Verify a TOTP or backup code for a user

//native

type Clerk = {

  apiKey: string;

};

/**

 * Verify a TOTP or backup code for a user

 * Verify that the provided TOTP or backup code is valid for the user.

Verifying a backup code will result it in being consumed (i.e. it will

become invalid).

Useful for custom auth flows and re-verification.

 */

export async function main(

  auth: Clerk,

  user_id: string,

  body: { code: string },

) {

  const url = new URL(`https://api.clerk.com/v1/users/${user_id}/verify_totp`);

  const response = await fetch(url, {

    method: "POST",

    headers: {

      "Content-Type": "application/json",

      Authorization: "Bearer " + auth.apiKey,

    },

    body: JSON.stringify(body),

  });

  if (!response.ok) {

    const text = await response.text();

    throw new Error(`${response.status} ${text}`);

  }

  return await response.json();

}