STstriga

Resume MFA Setup

Changed on

Important: This API returns an array of recoveryCodes if successful. DO NOT store these on behalf of the user and ensure that your application includes relevant messaging to the user to save these safely. If a user loses these codes and access to their authenticator device, the only way to reset a user 2FA will be through contacting support and verifying that the user is the same identity requesting a reset.

post/user/resume/setup-two-factor

Request

  • Base URL
    https://www.sandbox.striga.com/api/v1
  • URL
    https://www.sandbox.striga.com/api/v1/user/resume/setup-two-factor
  • Auth
    API key in header api-key and API key in header Authorization

Request body

userIdstring required

The Striga user ID for whom MFA setup has been started

secretstring required

The secret value returned in the start MFA setup endpoint

codestring required

TOTP code generated by an authenticator application and entered by the user

Response

200

recoveryCodesstring[]

Example response

{
  "recoveryCodes": [
    "QFTQ3-WGXHW"
  ]
}

Changes

  • 0541ed1923c1Revision changes
    • breaking

      removed the required property from the response with the status

    • breaking

      removed the required property from the response with the status

    • warning

      removed the optional property from the response with the status

    • info

      api operation id completeTotpEnrollment removed and replaced with start-mfa-setup-copy

    • info

      the endpoint scheme security apiKey AND authorization was removed from the API

    • info

      api tag Enrollment removed

    • info

      request body became optional

    • info

      the request property's minLength was decreased from 6 to 0

    • info

      removed the pattern ^[0-9]{6}$ from the request property

    • info

      removed the non-success response with the status