Auth: MFA

MFA Verify

Complete the second factor with a passkey assertion or a recovery code.

post/v1/auth/mfa/verify

Request

  • Base URL: https://api.robosystems.ai (the document declares no server; this is the origin it was published from)
  • URL: https://api.robosystems.ai/v1/auth/mfa/verify
  • Auth: none declared

Request body

mfa_tokenstring required

Token from a login that returned mfa_required

assertionobject nullable

WebAuthn assertion (browser JSON, opaque)

recovery_codestring nullable

Single-use recovery code

Response

Successful Response

userobject required

User information

orgobject nullable

Organization information (personal org created automatically on registration)

messagestring required

Success message

status'authenticated' | 'mfa_required' | 'mfa_enrollment_required'

Login flow state: authenticated (token present), or a passkey MFA step is required before a session is issued (mfa_token present)

mfa_tokenstring nullable

Short-lived token authorizing the MFA second step or forced enrollment; present only when status is not 'authenticated'

tokenstring nullable

JWT authentication token (optional for cookie-based auth)

expires_ininteger nullable

Token expiry time in seconds from now

refresh_thresholdinteger nullable

Recommended refresh threshold in seconds before expiry

Changes

No recorded changes to this operation across all 1 revision of this API.