MEmetabase
/api/session

POST /api/session/mfa/verify

Changed on

Complete a two-step login by verifying a one-time code. Takes the challenge_token returned by POST /api/session and either the 6-digit code from the user's authenticator app, one of their single-use recovery codes, or an emailed one-time code; on success sets the session cookie.

post/api/session/mfa/verify

Request

  • Base URL
    (relative, and the document was published on a file host, not at the API’s origin)
  • Auth
    API key in header X-API-Key

Request body

challenge_tokenstring required

value must be a non-blank string.

codestring required

value must be a non-blank string.

rememberboolean

Response

Successful response

Changes