---
title: "Changes to Send Two-Factor code."
method: POST
path: "/tf-validate"
---

# Changes to Send Two-Factor code.

`POST /tf-validate`

> Every recorded change to this operation, newest first.

## Timeline

Changed in 7 of 57 revisions.

- **2026-05-02** `21452a793d1a`: 1 info
- **2023-10-22** `b647a0e917e6`: 1 breaking, 6 info
- **2023-07-25** `205261c882e3`: 1 warning
- **2022-07-22** `4b3ea48a957a`: 1 breaking, 2 warning, 2 info
- **2022-04-11** `afed188e0556`: 3 breaking, 1 info
- **2020-10-21** `fd28d87246af`: 2 info
- **2020-08-31** `a06cc5a6dff4`: 1 info

## Changes

- **2026-05-02** `21452a793d1a`: 1 info
  - added the optional property `allOf[#/components/schemas/JsonResponseWithToken]/allOf[subschema #2]/response/user/refresh_token` to the response with the `200` status
- **2023-10-22** `b647a0e917e6`: 1 breaking, 6 info
  - the response's body type changed from no type to `object` for status `400`
  - added the new optional `query` request parameter `include_auth_token`
  - added `#/components/schemas/JsonResponseWithToken` to the response body `allOf` list for the response status `200`
  - removed `#/components/schemas/BaseJsonResponse, subschema #2` from the response body `allOf` list for the response status `400`
  - removed `#/components/schemas/TfValidateJsonResponse` from the response body `allOf` list for the response status `200`
  - added the required property `meta` to the response with the `400` status
  - added the required property `response` to the response with the `400` status
- **2023-07-25** `205261c882e3`: 1 warning
  - removed the optional property `allOf[#/components/schemas/TfValidateJsonResponse]/tf_validity_token` from the response with the `200` status
- **2022-07-22** `4b3ea48a957a`: 1 breaking, 2 warning, 2 info
  - the `allOf[subschema #2]/response/errors` response's property type changed from `object` to `array` for status `400`
  - removed the optional property `allOf[subschema #2]/response/error` from the response with the `400` status
  - removed the optional property `allOf[subschema #2]/response/errors/field-name` from the response with the `400` status
  - added the optional property `allOf[subschema #2]/response/field_errors` to the response with the `400` status
  - the response property `allOf[subschema #2]/response/errors` became required for the status `400`
- **2022-04-11** `afed188e0556`: 3 breaking, 1 info
  - the response's body type changed from `object` to no type for status `400`
  - removed the required property `meta` from the response with the `400` status
  - removed the required property `response` from the response with the `400` status
  - added `#/components/schemas/BaseJsonResponse, subschema #2` to the response body `allOf` list for the response status `400`
- **2020-10-21** `fd28d87246af`: 2 info
  - added `#/components/schemas/TfValidateJsonResponse` to the response body `allOf` list for the response status `200`
  - removed `#/components/schemas/DefaultJsonResponse` from the response body `allOf` list for the response status `200`
- **2020-08-31** `a06cc5a6dff4`: 1 info
  - endpoint added

---

[Operation](https://skmtc.dev/pallets-eco/apis/flask-security-external-api/docs/tf-validate/post.md) - [API](https://skmtc.dev/pallets-eco/apis/flask-security-external-api.md) - [Page](https://skmtc.dev/pallets-eco/apis/flask-security-external-api/changes/tf-validate/post)