---
title: "Verify Second Factor"
method: POST
path: "/v1/web/auth/verify-second-factor"
tags: ["Web Auth"]
---

# Verify Second Factor

`POST /v1/web/auth/verify-second-factor`

## Request

- Base URL: `https://api.hydraai.ru` (the document declares no server; this is the origin it was published from)
- URL: `https://api.hydraai.ru/v1/web/auth/verify-second-factor`
- Auth: none declared

## Request body

- VerifySecondFactor
  - `token` string, required
  - `code` string, required
  - `recovery` boolean

## Response `200`

Successful Response

- AuthResult
  - `user` WebUserPublic, required
    - `id` string, uuid, required
    - `email` string, required
    - `role` string, required
    - `status` string, required
    - `timezone` string, required
    - `created_at` string, date-time, required
  - `csrf_token` string, required

## Other responses

- `422`: Validation Error

## Changes

- **2026-11-04** `42d3d2735311`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/hydraai/apis/hydraai-api/changes/v1/web/auth/verify-second-factor/post.md)

---

[API](https://skmtc.dev/hydraai/apis/hydraai-api.md) - [All operations](https://skmtc.dev/hydraai/apis/hydraai-api/llms.txt) - [OpenAPI document](https://skmtc.dev/hydraai/apis/hydraai-api/revisions/42d3d2735311?raw)