# Post second

> tidekeeper's API reference: https://tidekeeper.eu/docs/api/post-auth-second

`POST /api/v1/auth/second`

## What to send

`SecondAnswer`: The second step given: the app's six digits, or a security key's answer.

- `code` (string or null)
- `key` (PasskeyAnswer or null)
- `token` (string, needed)

## The answer

200, `OAuthGo`: Where the browser goes next.

- `to` (string, needed)

## Asking

```sh
curl -X POST https://tidekeeper.eu/api/v1/auth/second \
    -H "Authorization: Bearer $TIDEKEEPER_TOKEN" \
    -H "Content-Type: application/json" \
    -d '{"token": "…"}'
```