Authenticator App

Verify Authenticator App Challenge

Verify a challenge when enrolling a authenticator app authenticator or when re-authenticating with an existing authenticator app authenticator

post/verify/totp

Request body

verificationCodestring required

The TOTP code inputted by the user.

Response

OK

isVerifiedboolean required

True if the inputted TOTP is correct.

accessTokenstring

A new short-term token with scopes to manage authenticators (e.g. add secondary authenticators, remove authenticators, view or regenerate recovery codes). Only present if the challenge succeeded.

failureReason'CODE_INVALID_OR_EXPIRED' | 'MAX_ATTEMPTS_EXCEEDED'

Changes

No recorded changes to this endpoint across all 1 revision of this API.