Authentication

Confirm forced enrollment and complete the login

Activates two-factor auth, returns the recovery codes and issues the session cookies.

post/auth/mfa/setup/confirm

Request

  • The document declares no server URL.
  • Auth: none declared

Request body

codestring required

A 6-digit TOTP code from the authenticator app, or a single-use recovery code (XXXXX-XXXXX).

Example request

{
  "code": "123456"
}

Response

successboolean required

Operation success status

recoveryCodesstring[] required

Single-use recovery codes issued on enrollment. Shown exactly once.

Example response

{
  "success": true
}

Changes

No recorded changes to this operation across all 51 revisions of this API.