token

Verify 2Fa

Flows B and C: exchange a temp_2fa_token + valid TOTP code for real access/refresh tokens.

  • scope=2fa_pending -> normal 2FA-protected login (user already has 2FA enabled).
  • scope=2fa_setup_required -> org-forced setup; on success also flips two_fa_enabled=True.
post/token/verify_2fa

Request

Query parameters

redirect_urlstring

Cookies

temp_2fa_tokenstring

Request body

tokenstring required

Response

Successful Response

unknown required

Changes

No recorded changes to this operation across all 8 revisions of this API.