---
title: "Login Second Step"
method: POST
path: "/auth/login/2fa"
---

# Login Second Step

`POST /auth/login/2fa`

## Request

- Base URL: `https://safefamilyapp.com` (the document declares no server; this is the origin it was published from)
- URL: `https://safefamilyapp.com/auth/login/2fa`
- Auth: none declared

The second step: an authenticator code, an emailed code, or a recovery code.

## Request body

- TwoFactorLogin
  - `challenge` string, required
  - `code` string, required

## Response `200`

Successful Response

- TokenResponse
  - `requires_2fa` boolean
  - `challenge` string, nullable
  - `method` string, nullable
  - `expires_in` integer, nullable
  - `is_admin` boolean
  - `is_demo` boolean
  - `email_verified` boolean
  - `access_token` string, required
  - `token_type` string
  - `email` string, required

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/safefamilyapp/apis/otri-api.md) · [All operations](https://skmtc.dev/safefamilyapp/apis/otri-api/llms.txt) · [OpenAPI document](https://skmtc.dev/safefamilyapp/apis/otri-api/revisions/d07bb03cb836?raw)