Auth

Begin TOTP enrolment

Mints a secret and returns it once, as an otpauth:// URI for an authenticator app. The factor is NOT enabled here — /enable is, once a code from the secret verifies, so an abandoned or mistyped enrolment cannot lock the account out.

post/v1/auth/2fa/setup

Request

  • Base URL: https://api.briefgate.dev
  • URL: https://api.briefgate.dev/v1/auth/2fa/setup
  • Auth: HTTP bearer

Response

Secret issued

secretstring

Base32, shown once.

otpauth_uristring
nextstring

Changes

No recorded changes to this operation across all 1 revision of this API.