QUquivaworks
Authentication

Finish sign-in on the chosen account

Changed on

Public. Completes an email-only sign-in that returned select_account. The token is single-use and every refusal is the same 401, so a token cannot be used to probe memberships. The response is AuthResponse, or MfaRequiredResponse when the account's user has TOTP on and the device is not remembered.

post/accounts/auth-select-account

Request

Request body

tokenstring required

The token from the select_account response

account_idstring required

Id of one of the accounts in the picker list

device_tokenstring

Remembered-device token; skips TOTP when valid

Response

Success

Changes