Number Verification API — Overview

Issue a one-time code to a mobile number and check the code the user enters.

Base URL

https://api.kongapj.com

Authentication

OpenID Connect (OAuth 2.0 bearer token). Obtain a token with the verify:manage scope and send it as Authorization: Bearer <token>.

TOKEN=$(curl -s https://keycloak.kongapj.com/realms/optus/protocol/openid-connect/token \
  -d grant_type=client_credentials -d client_id=YOUR_CLIENT \
  -d client_secret=YOUR_SECRET -d "scope=openid verify:manage" | jq -r .access_token)

Start a verification

curl -X POST https://api.kongapj.com/verify/v1/verifications \
  -H "Authorization: Bearer $TOKEN" -H "Content-Type: application/json" \
  -d '{"to":"+61400000000","channel":"sms"}'

Check the code

curl -X POST https://api.kongapj.com/verify/v1/verifications/{id} \
  -H "Authorization: Bearer $TOKEN" -H "Content-Type: application/json" \
  -d '{"code":"123456"}'

Responses

401 — missing/invalid token · 403 — token lacks verify:manage · 429 — rate limit exceeded.