---
title: "Post Totp Confirm"
method: POST
path: "/api/account/totp/confirm"
tags: ["account"]
---

# Post Totp Confirm

`POST /api/account/totp/confirm`

## Request

- Base URL: `https://api.getcheapgames.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.getcheapgames.com/api/account/totp/confirm`
- Auth: none declared

The first code from the app turns the second factor on, and the eight
recovery codes come back this once. 410 `setup-expired` for a blob over
ten minutes old, altered, or another account's; 401 `wrong-code`.

## Response `200`

Successful Response

- RecoveryCodesOut: Eight codes, `xxxxx-xxxxx`, shown once.
  - `recoveryCodes` string[], required

---

[API](https://skmtc.dev/getcheapgames/apis/getcheapgames-api.md) · [All operations](https://skmtc.dev/getcheapgames/apis/getcheapgames-api/llms.txt) · [OpenAPI document](https://skmtc.dev/getcheapgames/apis/getcheapgames-api/revisions/962824bb76da?raw)