Auth

Disable Mfa

Wipe every active MFA method on the current user.

Requires a fresh password re-auth so a stolen session JWT alone can't downgrade an account.

post/auth/mfa/disable

Request

  • Base URL: http://localhost:8000
  • URL: http://localhost:8000/auth/mfa/disable
  • Auth: HTTP bearer

Headers

API-Version'1'

Major API version. Omit or send 1 for the current v1 surface. Retired operations use RFC 9745 Deprecation and RFC 8594 Sunset headers.

Request body

passwordstring required

Response

Successful Response

msgstring required

Changes

No recorded changes to this operation across all 1 revision of this API.