auth

Totp Forgot

Email-recovery for a lost authenticator. Requires email AND current password.

Always returns 200 — and always runs bcrypt against either the real hash or a dummy — so neither the existence of the account nor whether 2FA is on can be inferred from response timing.

post/api/auth/totp/forgot

Request

  • Base URL: https://kernelscan.io
  • URL: https://kernelscan.io/api/auth/totp/forgot
  • Auth: none declared

Response

Successful Response

object required

Changes

No recorded changes to this operation across all 1 revision of this API.