POST /v1/phone-verification/start

Purpose

Trigger phone verification for an already linked user.

Auth requirement

Bearer API key (Authorization: Bearer <key>).

Request schema

{
  "user_id": "string"
}

Response schema

202 Accepted

{
  "user_id": "string",
  "status": "pending",
  "expires_at": "ISO-8601"
}

Error cases

• 401 unauthorized: invalid/inactive API key.
• 400 invalid_request: malformed body.
• 404 not_found: user has no Telegram link for this tenant.

Curl example

curl -X POST "$GATEWAY_BASE_URL/v1/phone-verification/start" \
  -H "Authorization: Bearer $ETN_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"user_id":"user_123"}'

Notes and limits

• Session TTL is 10 minutes.
• Prompt message is branded using key label (or fallback).