---
title: "Admin portal: second-factor step. Returns the admin session token."
method: POST
path: "/api/auth/admin/2fa/verify"
tags: ["Admin portal auth"]
---

# Admin portal: second-factor step. Returns the admin session token.

`POST /api/auth/admin/2fa/verify`

## Request

- Base URL: `https://api.rewritelifestyle.ai` (the document declares no server; this is the origin it was published from)
- URL: `https://api.rewritelifestyle.ai/api/auth/admin/2fa/verify`
- Auth: none declared

## Request body

- AdminMfaVerifyDto
  - `challengeToken` string, required: challengeToken from POST /auth/admin/login
  - `code` string, required

## Response `200`

## Changes

- **2026-11-07** `0ddc49451c22`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/rewritelifestyle/apis/rewrite-lifestyle-api/changes/api/auth/admin/2fa/verify/post.md)

---

[API](https://skmtc.dev/rewritelifestyle/apis/rewrite-lifestyle-api.md) - [All operations](https://skmtc.dev/rewritelifestyle/apis/rewrite-lifestyle-api/llms.txt) - [OpenAPI document](https://skmtc.dev/rewritelifestyle/apis/rewrite-lifestyle-api/revisions/0d22636dfcb9?raw)