auth

Report whether the caller has a TOTP factor.

Reads the caller's OWN authenticator state: whether a confirmed factor stands, and whether an enrolment is mid-flight (a staged seed awaiting its first confirming code). It discloses nothing a caller could not already learn by attempting an enrolment — a second start is refused by name — so the account surface can state the fact rather than disclaim knowledge of it.

get/api/v1/auth/totp

Request

  • Base URL: / (relative, and the document was published on a file host, not at the API’s origin)
  • URL: /api/v1/auth/totp
  • Auth: HTTP bearer

Response

The caller's TOTP factor state.

confirmedboolean required

True when a confirmed authenticator factor stands on the account.

pendingboolean required

True when an enrolment is staged but its first confirming code is not yet in.

Changes