Authentication

post/auth/step-up

Request

  • Base URL: /api (relative, and the document was published on a file host, not at the API’s origin)
  • URL: /api/auth/step-up
  • Auth: session_token (a scheme the document does not define)

Request body

codestring required

Current TOTP value or an unused recovery code.

Response

Session elevated for sensitive actions

expires_atstring date-time required

ISO 8601 timestamp after which sensitive actions require verification again.

Changes

No recorded changes to this operation across all 50 revisions of this API.