Auth

Enroll Totp

Start a TOTP enrolment.

Generates a fresh secret, stores a pending (is_active=False) row, and returns the otpauth:// URI + the manual base32 secret so the user can either scan the QR or paste it into their authenticator.

Recovery-locked sessions (mfa_recovery=true) are deliberately allowed here — that's how a user clears their recovery lock.

post/auth/mfa/enroll/totp

Request

  • Base URL: http://localhost:8000
  • URL: http://localhost:8000/auth/mfa/enroll/totp
  • Auth: HTTP bearer

Headers

API-Version'1'

Major API version. Omit or send 1 for the current v1 surface. Retired operations use RFC 9745 Deprecation and RFC 8594 Sunset headers.

Request body

labelstring required

Response

Successful Response

method_idinteger required
otpauth_uristring required
manual_secretstring required

Changes

No recorded changes to this operation across all 1 revision of this API.