v1

latestOpenAPI 3.1.0raw.githubusercontent.com2026-03-02333644.7 KB
Auth

Complete MFA verification

Verify an MFA factor during authentication. On success, a new session with mfaVerified: true JWT claim is issued and the old session is revoked.

post/api/cis/v1/auth/factors/{factorId}/verify

Path parameters

factorIdstring uuid required

Headers

x-tenant-idstring required

Request body

sessionIdstring uuid required
codestring required

Response

MFA verified

sessionIdstring uuid
accessTokenstring

JWT (HS256 or ES256)

expiresIninteger

Token TTL in seconds

refreshTokenstring
mfaRequiredboolean

True if MFA step is needed before full access

mfaVerifiedboolean

Example response

{
  "mfaVerified": true
}