MEmetabase
/api/session

POST /api/session/mfa/send-email-otp

Changed on

Email a one-time code as a fallback second factor (for a user who lost their authenticator but still has recovery codes disabled or unavailable). Requires a valid challenge token from POST /api/session; the code is single-use with a 10-minute expiry and is accepted by POST /mfa/verify like any other code.

post/api/session/mfa/send-email-otp

Request

  • Base URL
    (relative, and the document was published on a file host, not at the API’s origin)
  • Auth
    API key in header X-API-Key

Request body

challenge_tokenstring required

value must be a non-blank string.

Response

Successful response

successunknown required

Changes