Disable two-factor authentication
Turns off 2FA after proving possession of the second factor (a valid TOTP code or an unused recovery code) — a stolen session cookie alone must not be able to strip the account's protection. Clears the secret and deletes all recovery codes. 400 if 2FA is not enabled or the code is invalid. Shares the per-user 5 code attempts per minute limiter with setup, confirm, recovery-codes, and login phase 2.
post/auth/totp/disable
Request
- Base URL: https://app.yoping.me/api/v1
- URL: https://app.yoping.me/api/v1/auth/totp/disable
- Auth: API key in cookie yp_session
Request body
Response
Success with a human-readable message.
Changes
No recorded changes to this operation across all 1 revision of this API.