Verify OTP

​

Overview

1. Automatic verification: Store enters the OTP provided by customer
2. Manual confirmation: Store confirms customer showed valid OTP on their device

​

Authentication

​

Endpoint

POST /api/orders/:id/verify-otp

​

Path parameters

​

Request body

​

Response

​

OTP verification flow

1. Store marks order as ready → OTP is generated
2. Customer receives OTP via email and push notification
3. Customer arrives at store and shows OTP
4. Store verifies OTP using this endpoint
5. Order is marked as picked_up
6. Customer receives pickup confirmation
7. readyExpiresAt is cleared (no-show timer cancelled)

​

Example request

curl -X POST https://api.campusbite.com/api/orders/65f7a8b9c1234567890abcde/verify-otp \
  -H "Authorization: Bearer STORE_JWT_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "otp": "573842"
  }'

​

Example response

{
  "success": true,
  "message": "OTP verified. Order marked as picked up.",
  "data": {
    "order": {
      "id": "65f7a8b9c1234567890abcde",
      "orderNumber": "ORD-20240318-001",
      "orderStatus": "picked_up",
      "paymentStatus": "success",
      "totalAmount": 249.50,
      "items": [
        {
          "menuItemId": "65f7a8b9c1234567890abcdf",
          "name": "Paneer Burger",
          "price": 120,
          "quantity": 1,
          "total": 120
        },
        {
          "menuItemId": "65f7a8b9c1234567890abce0",
          "name": "French Fries",
          "price": 80,
          "quantity": 1,
          "total": 80
        }
      ],
      "isOtpVerified": true,
      "readyAt": "2024-03-18T14:45:00.000Z",
      "readyExpiresAt": null,
      "customer": {
        "id": "65f7a8b9c1234567890abce6",
        "name": "Rahul Sharma",
        "email": "[email protected]"
      },
      "store": {
        "id": "65f7a8b9c1234567890abce2",
        "name": "Campus Cafe"
      },
      "createdAt": "2024-03-18T14:30:00.000Z",
      "updatedAt": "2024-03-18T14:50:00.000Z"
    }
  }
}

​

Error responses

{
  "success": false,
  "message": "Provide OTP or confirm manual OTP verification."
}

{
  "success": false,
  "message": "Invalid or expired OTP."
}

{
  "success": false,
  "message": "OTP can only be verified when order status is \"ready\"."
}

{
  "success": false,
  "message": "OTP expired. Mark order ready again to generate a new OTP."
}

{
  "success": false,
  "message": "You are not authorized to verify OTP for this order."
}

{
  "success": false,
  "message": "Order not found."
}

​

OTP format and expiry

• Format: 6-digit numeric code (e.g., 573842)
• Expiry: 10 minutes from generation
• Generation: Automatically created when order status changes to ready
• Delivery: Sent via email and push notification to customer

​

Verification methods

​

Automatic verification

1. Ask customer for their OTP
2. Enter the 6-digit code in your system
3. Call API with otp parameter
4. System validates and marks order as picked up

​

Manual confirmation

1. Ask customer to show OTP on their phone
2. Visually verify the OTP matches your records
3. Call API with manualConfirm: true
4. System trusts your verification and marks order as picked up

​

No-show prevention

• readyExpiresAt timestamp is cleared
• No-show timer is cancelled
• Customer’s trust tier is preserved

• Order is automatically cancelled
• No-show penalty is applied
• Customer’s trust tier may decrease