2FA Reset

Poll the status of a 2FA reset

Step 2 — poll while the user completes identity verification, and again after /complete to confirm the new factor was enrolled. status tracks the reset lifecycle (INITIATED → PENDING_REVIEW → LIVENESS_PASSED → COMPLETED, or terminal REJECTED / EXPIRED). For totp / passkey resets, enrollmentStatus gives a finer signal for the enrollment step: PENDING once verification has passed but the new factor has not yet been submitted, COMPLETED once it has. SMS resets have no enrollment step, so enrollmentStatus is null.

post/user/2fa/reset/status

Request

  • Base URL
    https://www.sandbox.striga.com/api/v1
  • URL
    https://www.sandbox.striga.com/api/v1/user/2fa/reset/status
  • Auth
    API key in header api-key and API key in header Authorization

Request body

userIdstring uuid required
resetIdstring uuid required

Response

Current state of the reset.

resetIdstring uuid required
factor'sms' | 'totp' | 'passkey' required
status'INITIATED' | 'PENDING_REVIEW' | 'LIVENESS_PASSED' | 'COMPLETED' | 'REJECTED' | 'EXPIRED' required
enrollmentStatus'PENDING' | 'COMPLETED' nullable required

Enrolment-tail signal for totp / passkey resets; null for sms and for a passkey reset opened with a credentialId, which completes in the /complete call.

expiresAtstring date-time required
completedAtstring date-time

Present once the reset reached COMPLETED.

credentialIdstring

Present for a passkey reset opened with a credentialId — the passkey the reset removes.

Changes

No recorded changes to this operation across all 1 revision of this API.