Auth
Complete a login that was challenged for MFA
T731: the second step of login for an account with confirmed TOTP MFA. Redeems the challenge from POST /auth/login's AuthMfaChallengeResponse together with either a live 6-digit TOTP code or a single-use backup code, and only then sets the session cookies. Rate-limited to 10 requests/5min per IP.
post/auth/login/mfa
Request
- Base URL: http://localhost:38200
- URL: http://localhost:38200/auth/login/mfa
- Auth: none required
Request body
Response
Authenticated. JWT + refresh cookies set on the response.
Changes
No recorded changes to this operation across all 1 revision of this API.