STstriga

Start MFA Setup

Changed on

This API returns a secret and a base32 encoded secret for which you may display a QR code with your brand/logo such that the user can save it in their favorite TOTP application (Google Authenticator, Authy etc.)

Please DO NOT persist these secrets on your backend.

post/user/start/setup-two-factor

Request

  • Base URL
    https://www.sandbox.striga.com/api/v1
  • URL
    https://www.sandbox.striga.com/api/v1/user/start/setup-two-factor
  • Auth
    API key in header api-key and API key in header Authorization

Request body

userIdstring required

A Striga user ID

Response

200

secretstring
secretBase32Encodedstring

Example response

{
  "secret": "<totpSecret>",
  "secretBase32Encoded": "<totpSecretBase32Encoded>"
}

Changes

  • 0541ed1923c1Revision changes
    • breaking

      removed the required property from the response with the status

    • breaking

      removed the required property from the response with the status

    • warning

      removed the optional property from the response with the status

    • warning

      removed the optional property from the response with the status

    • info

      api operation id startTotpEnrollment removed and replaced with start-mfa-setup

    • info

      the endpoint scheme security apiKey AND authorization was removed from the API

    • info

      api tag Enrollment removed

    • info

      request body became optional

    • info

      removed the non-success response with the status