---
title: "PIN session of an owner or manager: re-enter the password (and two-step code when on) to hold the full role for 15 minutes."
method: POST
path: "/api/v1/pin/step-up"
---

# PIN session of an owner or manager: re-enter the password (and two-step code when on) to hold the full role for 15 minutes.

`POST /api/v1/pin/step-up`

## Request

- Base URL: `http://127.0.0.1:4310`
- URL: `http://127.0.0.1:4310/api/v1/pin/step-up`
- Auth: one of:
  - HTTP bearer
  - API key in cookie `sfb_session`

## Request body

- object
  - `password` string, required
  - `code` string

## Response `200`

OK

- object

## Other responses

- `400`: Validation error
- `401`: Unauthenticated
- `403`: Forbidden
- `404`: Not found
- `409`: Conflict or invalid state

---

[API](https://skmtc.dev/scalingfirm/apis/tsf-booking-api.md) · [All operations](https://skmtc.dev/scalingfirm/apis/tsf-booking-api/llms.txt) · [OpenAPI document](https://skmtc.dev/scalingfirm/apis/tsf-booking-api/revisions/81704199cd37?raw)