Reference / Dashboard

verify a TOTP code, confirming enrollment and stepping the current session up to `aal = 2`. Used both to finish enrolling and to satisfy the sign-in challenge.

POST /v1/dashboard/mfa/totp/verify

End-user session operationId: mfa_verify

Authorization

Called from the browser with the publishable application id (x-application-id); the access token lives in memory.

200 Verified; session stepped up

{
  "data": {},
  "error": {
    "code": "string",
    "message": "string"
  },
  "meta": {
    "timestamp": "string"
  },
  "success": false
}

422 Invalid code

curl -X POST "http://localhost:8080/v1/dashboard/mfa/totp/verify" \
  -H "Content-Type: application/json" \
  -d '{
  "code": "string"
}'

live request

POST http://localhost:8080/v1/dashboard/mfa/totp/verify

application/json