Auth

Complete MFA step-up or enrollment

Sign-in flow: consumes the mnemom_mfa_pending cookie, verifies the TOTP code, and issues a full mnemom_session — unless the user's email domain now enforces SSO (403 sso_required, or 503 sso_check_unavailable when the SSO lookup fails), re-checked because the pending cookie outlives the sign-in check. Enrollment flow: verifies a freshly-enrolled factor using the current session and upgrades it to aal2.

post/auth/mfa/verify

Request

  • Base URL: https://api.mnemom.ai/v1
  • URL: https://api.mnemom.ai/v1/auth/mfa/verify
  • Auth: API key in cookie mnemom_session

Request body

factor_idstring required
challenge_idstring required
codestring required

6-digit TOTP code.

Response

Full session issued. Response sets mnemom_session cookie.

Changes

No recorded changes to this operation across all 1 revision of this API.