Auth

Finish a login that owes a second factor

Exchanges the challenge from /v1/auth/login for a session. Accepts a TOTP code or one recovery code. The challenge is single-use, expires in five minutes, and is burned after five wrong attempts.

post/v1/auth/2fa/verify

Request

  • Base URL: https://api.briefgate.dev
  • URL: https://api.briefgate.dev/v1/auth/2fa/verify
  • Auth: none required

Request body

challengestring required
codestring required

Response

Signed in; the session cookie is set

Changes

No recorded changes to this operation across all 1 revision of this API.