auth

Google Mfa

Finish a Google sign-in for a 2FA account: challenge + authenticator code.

Brute force is bounded per challenge (_MFA_MAX_ATTEMPTS wrong codes and it is deleted), per account and per network across challenges (_MFA_MAX_FAILURES_PER_* wrong codes lock this step for _MFA_LOCK_SECONDS), and a code that already signed in is refused. No @limiter.limit here: this module has from __future__ import annotations (the PEP 563 + slowapi hazard).

post/api/v1/auth/google/mfa

Request

  • Base URL: https://api.nudgelink.co (the document declares no server; this is the origin it was published from)
  • URL: https://api.nudgelink.co/api/v1/auth/google/mfa
  • Auth: none declared

Request body

challengestring required
totp_codestring required

Response

Successful Response

unknown required

Changes

No recorded changes to this operation across all 1 revision of this API.